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Abstract 

In this paper, we consider an approach to update nonmonotonic knowledge bases rep- 
resented as extended logic programs under the answer set semantics. In this approach, 
new information is incorporated into the current knowledge base subject to a causal re- 
jection principle, which enforces that, in case of conflicts between rules, more recent rules 
are preferred and older rules are overridden. Such a rejection principle is also exploited 
in other approaches to update logic programs, notably in the method of dynamic logic 
programming, due to Alferes et al. 

One of the central issues of this paper is a thorough analysis of various properties of the 
current approach, in order to get a better understanding of the inherent causal rejection 
principle. For this purpose, we review postulates and principles for update and revision 
operators which have been proposed in the area of theory change and nonmonotonic rea- 
soning. Moreover, some new properties for approaches to updating logic programs are 
considered as well. Like related update approaches, the current semantics does not in- 
corporate a notion of minimality of change, so we consider refinements of the semantics 
in this direction. As well, we investigate the relationship of our approach to others in 
more detail. In particular, we show that the current approach is semantically equivalent 
to inheritance programs, which have been independently defined by Buccafurri et at, and 
that it coincides with certain classes of dynamic logic programs, for which we provide 
characterizations in terms of graph conditions. In view of this analysis, most of our results 
about properties of the causal rejection principle apply to each of these approaches as well. 
Finally, we also deal with computational issues. Besides a discussion on the computational 
complexity of our approach, we outline how the update semantics and its refinements can 
be directly implemented on top of existing logic programming systems. In the present 
case, we implemented the update approach using the logic programming system DLV. 



1 Introduction 

1.1 Motivation and Context 

Logic programming has been conceived as a computational logic paradigm for prob- 
lem solving and offers a number of advantages over conventional programming lan- 
guages. In particular, it is a well-suited tool for declarative knowledge representation 
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and common-sense reasoning (Baral & Gclfond, 1994), and possesses thus a high 
potential as a key technology to equip software agents with advanced reasoning 
capabilities in order to make those agents behave intelligently (cf., e.g., (Sadri & 
Toni, 2000)). 

It has been realized, however, that further work is needed on extending the cur- 
rent methods and techniques to fully support the needs of agents. In a simple (but, 
as for currently deployed agent systems, realistic) setting, an agent's knowledge 
base, KB, may be modeled as a logic program, which the agent may evaluate to 
answer queries that arise. Given various approaches to semantics, the problem of 
evaluating a logic program is quite well-understood, and (beside Prolog) provers for 
semantics with more sophisticated treatment of negation may be used. Currently 
available provers include the systems DeR.es (Cholewihski et al., 1996), DLV (Eitcr 
et al, 1997a), smodels (Niemela & Simons, 1996), and XSB (Rao et al, 1997). 

An important aspect, however, is that an agent is situated in an environment 
which is subject to change. This requests the agent to adapt over time, and to 
adjust its decision making. An agent might be prompted to adjust its knowledge 
base KB after receiving new information in terms of an update U, given by a clause 
or a set of clauses that need to be incorporated into KB. Simply adding the rules 
of U to KB does not give a satisfactory solution in practice, even in simple cases. 
For example, if KB contains the rules a <— b and b <— , and U consists of the 
rule ->a <— stating that a is false, then the union KB U U is not consistent under 
predominant semantics such as the answer set semantics (Gelfond & Lifschitz, 1991) 
or the well-founded semantics (Van Gelder et al, 1991). However, by attributing 
higher priority to the update ->a <— , a result is intuitively expected which has a 
consistent semantics, where the emerging conflict between old and new information 
is resolved. 

To address this problem, some approaches for updating logic programs with (sets 
of) rules have been proposed recently (Alferes et al, 1998; Alfercs et al, 1999; Inoue 
& Sakama, 1999; Zhang & Foo, 1998). In this paper, we consider an approach which 
is based on a causal rejection principle. According to this principle, a rule r is only 
discarded providing there is a "reason" for doing so, in terms of another, more 
recent rule r' which contradicts r. That is, if both r and r 1 are applicable (i.e., their 
bodies are satisfied) and have opposite heads, then only r' is applied while r is 
discarded. In the example from above, the rule r : a <— b in the current knowledge 
base KB (whose body is true given rule b <— ) is rejected by the new rule r' : ->a <— 
in the update (whose body is also true), and thus in the updated knowledge base, 
r is not applied. 

The causal rejection principle is not novel — in fact, it constitutes a major in- 
gredient of the well-known dynamic logic programming approach (Alferes et al., 
1998; Alferes et al., 2000). Furthermore, it underlies, in slightly different forms, the 
related approaches of inheritance logic programs (Buccafurri et al., 1999a) and or- 
dered logic programs (Laenens et al., 1990; Buccafurri et al., 1996). We provide here 
a simple and rigorous realization of this principle, in terms of "founded" rejection: a 
rule r may only be rejected by some other rule r' which itself is not rejected. While 
this foundedness condition, as it appears, plays in effect no role in the particular 
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semantics we consider, it can do so for more involved semantics based on causal 
rejection, such as the one by Alferes et al. (1998; 2000). 

Starting from a simple formalization of a semantics for updating logic programs 
based on causal rejection, which offers the advantage of a clear declarative charac- 
terization and of a syntactical realization at the same time, the main goal of this 
paper is to investigate properties of this semantics, as well as to analyze the rela- 
tionship to other semantics for updating logic programs, in particular to dynamic 
logic programming. Notice that, although uses and extensions of dynamic logic pro- 
gramming have been discussed (cf. (Alferes et at, 1999; Alferes & Pereira, 2000; 
Leite et al, 2000)), its properties and relations to other approaches and related 
formalisms have been less explored so far (but see (Alferes & Pereira, 2000)). 

1.2 Main Contributions 

Inspired by ideas in (Alferes et al., 1998; Alferes et al, 2000), we consider a se- 
mantics for sequences P = (Pi, . . . ,P n ) of extended logic programs, in terms of 
a syntactic transformation to an update program, which is a single extended logic 
program in an extended language. The semantics properly generalizes the answer 
set semantics (Gelfond & Lifschitz, 1991) of single logic programs. The readable 
syntactic representation of the semantical results — which is useful from a compu- 
tational perspective — is complemented, as in (Alferes et al, 1998; Alferes et al, 
1999), by an elegant semantical characterizations in terms of a modified Gelfond- 
Lifschitz reduction, resulting from the usual construction by removal of rejected 
rules. The transformation we describe is similar to the one by Alferes et al., but 
involves only a few types of rules and new atoms. For capturing the rejection prin- 
ciple, information about rule rejection is explicitly represented at the object level 
through rejection atoms; this is similar to an implementation of the related inher- 
itance logic program approach proposed by Buccafurri et al. (1999a). Though not 
new in spirit, the approach we suggest offers a more accessible definition and is 
suitable for studying general properties of updates by causal rejection, providing 
insight in the mechanism of the rejection principle itself. 

The main contributions of this paper can be summarized as follows. 

(1) We extensively investigate, from different points of view, properties of up- 
date programs and answer set semantics for update sequences. We first analyze 
them from a belief revision perspective, and evaluate various (sets of) postulates 
for revision and iterated revision from the literature (Alchourron et al., 1985; Kat- 
suno & Mendelzon, 1991; Darwiche & Pearl, 1997; Lehmann, 1995). To this end, 
we discuss possible interpretations of update programs as change operators for non- 
monotonic logical theories. As it turns out, update programs (and thus equivalent 
approaches) do not satisfy many of the properties defined in the literature. This is 
partly explained by the nonmonotonicity of logic programs and the causal rejection 
principle embodied in the semantics, which strongly depends on the syntax of rules. 

Furthermore, we consider properties from a nonmonotonic reasoning perspective, 
by naturally interpreting update programs as nonmonotonic consequence relations, 
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and review postulates and principles which have been analyzed by Kraus, Lchmann, 
and Magidor (1990), and Makinson (1993). 

Finally, we present and discuss some further general properties relevant for update 
programs. Among them is an iterativity property, which informally states equiva- 
lence of nesting ((Pi,P 2 ),P 3 ) and sequences (Pi,P2,Ps) of updates. A possible 
interpretation of this property is that an immediate update strategy, which incor- 
porates new information immediately into the knowledge base, is equivalent to 
demand-driven evaluation, where the actual knowledge base KB is built on demand 
of particular queries, and full information about KB's update history is known. As 
we shall see, the property does not hold in general, but for certain classes of pro- 
grams. 

(2) As it appears, update answer sets — like related concepts based on causal 
rejection — do not respect minimality of change. We thus refine the semantics of 
update sequences and introduce minimal answer sets and strictly minimal answer 
sets. Informally, in minimal answer sets, the set of rules that need to be rejected is 
minimized. This means that a largest set of rules should be respected if an answer 
set is built; in particular, if all rules can be satisfied, then no answer sets would 
be adopted, which request the rejection of any rule. The notion of strict minimal- 
ity further refines minimality by enforcing that rejection of older rules should be 
preferred to rejection of newer rules, thus performing hierarchic minimization. 

The refined semantics come at the cost of higher computational complexity, and 
increase the complexity of update answer sets for propositional programs by one 
level, namely from the first to the second level in the polynomial hierarchy. This 
parallels similar results for the update semantics by Sakama and Inouc (1999), 
which employs a notion of minimality in the basic definition. 

(3) We conduct a comparison between update programs and alternative ap- 
proaches for updating logic programs (Alfcrcs et al., 1998; Alferes et al., 2000; 
Zhang & Foo, 1998; Inoue & Sakama, 1999; Leite & Pereira, 1997; Leite, 1997; 
Marek & Truszczyhski, 1994) and related approaches (Buccafurri et al., 1999a; 
Delgrande et al, 2000). We find that for some of these formalisms, syntactic sub- 
classes are semantically equivalent to update programs. Thus, update programs 
provide a (different) characterization of these fragments, and by their simplicity, 
contribute to better understanding on the essential working of these formalisms 
on these fragments. Furthermore, our results on properties of update answer set 
semantics carry over to the equivalent fragments, and establish also semantical re- 
sults for these formalisms, which have not been analyzed much in this respect so 
far. Finally, equivalent fragments of different formalisms are identified via update 
programs. 

First, we show that update programs are, on the language we consider, equiv- 
alent to inheritance logic programs. More precisely, our notion of an answer set 
for an update sequence P = (Pi, . . . ,P n ) coincides with the notion of an answer 
set for a corresponding inheritance program P K in the approach by Buccafurri et 
al. (1999a), where P < results from P by interpreting more recent updates in the 
sequence (P\, . . . , P n ) (i.e., programs with higher index) as programs containing 
more specific information. Thus, update programs (and classes of dynamic logic 
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programs) may semantically be regarded as fragment of the inheritance framework 
of Buccafurri et al. (1999a). We then compare our update programs to revision pro- 
gramming by Marek and Truszczynski (1994) and the related approach of Leite and 
Pereira (1997), which has been extended to sequences of programs in (Leite, 1997). 
It appears that the fragment of this formalism where programs merely use weak 
negation is, apart from extra conditions on sequences of more than two programs, 
semantically equivalent to update programs. Furthermore, we give a thorough anal- 
ysis of the dynamic logic programming approach by Alferes et al. (1998; 2000). Their 
notion of model of an update sequence P, which we refer to as dynamic answer set, 
semantically imposes extra conditions compared to our update answer set. We give 
a precise characterization of the case in which the definitions are equivalent, using 
graph-theoretic concepts. From this characterization, we get syntactic conditions for 
classes of programs on which dynamic answer sets and update answer sets coincide. 
Notice that the examples discussed in (Alferes et al, 1998; Alferes et al., 2000) 
satisfy these conditions. 1 Furthermore, by this correspondence, some results for 
update principles and computational complexity derived for our update programs 
carry over to dynamic logic programs as well. Further inspection, which we do not 
carry out here, suggests the same results beyond the corresponding fragments. 

To the best of our knowledge, no investigation of approaches to updating logic 
programs from the perspectives of belief revision and nonmonotonic consequences 
relations has been carried out so far. In view of our results about the relationship 
between update programs and other approaches, in particular to inheritance logic 
programs and fragments of dynamic logic programming, our investigations apply 
to these formalisms as well. 

1.3 Structure of the Paper 

The paper is organized as follows. After providing some necessary preliminaries in 
the next section, we introduce in Section 3 update programs and answer sets for 
such programs, and establish some characterization results. In Section 4, we embark 
on our study of general principles of update programs based on causal rejection from 
various perspectives. The refinements of answer sets to minimal and strictly minimal 
answer sets are considered in Section 5. Section 6 is devoted to computational issues 
of our approach. After an investigation of the computational complexity of update 
programs under the semantics introduced, we discuss an implementation of our 
approach based on the DLV logic programming tool (Eiter et al, 1997a; Eiter et al, 
1998). In Section 7, relations to other and related approaches are investigated. The 
paper concludes with Section 8, containing a short summary and a discussion of 
further work and open issues. Some proofs and further results, which are omitted 
here for space reasons, can be found in (Eiter et al., 2000b). 

1 In a preliminary version of this paper (Eiter et al., 2000a), we erroneously reported, due to 
misunderstanding notation in (Alferes et al, 1998; Alferes et al, 2000), that dynamic logic 
programs and update programs are equivalent in general. This view was supported by the 
examples mentioned and many others we considered. 
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2 Preliminaries 

We deal with extended logic programs (Gelfond & Lifschitz, 1991), which consist of 
rules built over a set A of propositional atoms where both default negation not and 
strong negation -i is available. A literal, L, is either an atom A (a positive literal) or 
a strongly negated atom —>A (a negative literal). For a literal L, the complementary 
literal, -<L, is -*A if L = A, and A if L = -*A, for some atom A. For a set S of 
literals, we define = {^L \ L G S}, and denote by Lit^ the set A U -*A of all 
literals over A. A literal preceded not is called a weakly negated literal. 

A rule, r, is an ordered pair Lq <— B(r), where Lq is a literal and 5(r) is a 
finite set of literals or weakly negated literals. We also allow the case where Lq may 
be absent. We call Lq the head of r, denoted H(r), and B(r) the body of r. For 
B(r) = {Li, . . . ,L m , not L m+ i, . . . , notL n }, we define B+(r) = {L±, . . . , L m } and 
B~(r) = {L m+ i, . . . ,L n }. The elements of B + (r) are referred to as the prerequisites 
of r. We employ the usual conventions for writing rules like Lq <— B\ U Bi or 
Lo <— Si U {L} as P <— Bi,B 2 and L <— B\,L, respectively. Generally, rule r 
with B(r) as above will simply be written as 

Lq <— ii, • • • , L TO , not L m+ i, . . . , not L n . 

If r has an empty head, then r is a constraint; if the body of r is empty, then r is 
a fact; if n = m (i.e., if r contains no default negation), then r is a 6osic rw/e. We 
denote by the set of all rules constructible using the literals in Lit a. 

An extended logic program (ELP), P, is a (possibly infinite) set of rules. If all 
rules in P arc basic, then P is a basic program. Usually, A will simply be understood 
as the set of all atoms occurring in P. 

An interpretation I is a set of literals which is consistent, i.e., / does not contain 
complementary literals A and ~^A. A literal L is true in I (symbolically J |= L) iff 
L E I, and /afee otherwise. Given a rule r, the body £?(r) of r is true in /, denote 
/ |= B(r), iff (i) each L G B + (r) is true in J and (ii) each L G B~(p) is false in /. 
Rule r is true in /, denoted J |= r, iff £f(r) is true in J whenever -B(r) is true in 
/. In particular, a constraint r is true in / iff / ^= B(r). For a program P, I is a 
model of P, denoted / |= P, if 7 |= r for all r G P. 

Let r be a rule. Then r + denotes the basic rule obtained from r by deleting all 
weakly negated literals in the body of r, i.e., r + = H(r) <— P + (r). Furthermore, 
we say that rule r is defeated by a set of literals S if some literal in B~ (r) is true 
in S, i.e., if B~(r) fl 5 7^ 0. As well, each literal in B~(r) fl 5 is said to defeat r. 

The reduct, P s , of a program P relative to a set £ of literals is defined by 

P s = {r + I r e II and r is not defeated by S}. 

An interpretation / is an answer set of a program P iff it is a minimal model of 
P 1 . By S(P) we denote the collection of all answer sets of P. If S(P) ^ 0, then P 
is said to be satisfiable. 

We regard a logic program P as the epistemic state of an agent. The given 
semantics is used for assigning a belief set to any epistemic state P as follows. 
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Let I C Lit a be an interpretation. Define 

Bel A (I) = {r g C A | I |= r}. 
Furthermore, for a class X of interpretations, let Bel A (T) = f] IeX Bel A (I). 
Definition 1 

For a logic program P, the belief set, Bel A {P), of P is given by Bel A {P) = 
Bel A (S(P)). 

We write P |=^ r if r E Bel A (P), and for any program Q, we write P |=^t Q if 
P \= A q for all q e Q. Programs Pi and P2 are equivalent (modulo .4), symbolically 
Pi =_4 P2, iff Bel A (P\) = Bel A (P2)- It can be seen that if cither Pi or P2 involves 
only finitely many atoms, or if A is finite, then Pi = A P2 is equivalent to the 
condition that Pi and P2 have the same answer sets modulo A. We will drop the 
subscript 11 A" in Bel A (-), \= A , and = A if no ambiguity can arise. 
Belief sets enjoy the following natural properties: 

Theorem 1 

For every logic program P, we have that: 

(i) P C Bel(P); 

(ii) Bel{Bel{P)) = Bel(P); 

(iii) {r \ I \= r, for every interpretation 1} C Bel(P). 
Proof 

Properties (i) and (iii) hold trivially. Property (ii) can be seen as follows: Bel(P) C 
Bel{Bel(P)) follows directly from property (i), and Bel(Bel(P)) C Bel(P) holds 
due to the fact that each answer set of P is also an answer set of Bel(P). □ 

Clearly, the belief operator Bel(-) is nonmonotonic, i.e., in general, Pi C P 2 does 
not imply BeZ(Pi) C Bel(P 2 ). 

3 Update programs 

We introduce a framework to update logic programs based on a compilation tech- 
nique to ELPs. The basic idea is the following. Given a sequence (Pi, . . . , P„) of 
ELPs, each Pj is assumed to update the information expressed by the initial sec- 
tion (Pi, . . . , Pi-i). The sequence (Pi, . . . , P„) is translated into a single ELP P', 
respecting the successive update information, such that the answer sets of P' rep- 
resent the answer sets of (Pi, . . . ,P„). The translation is realized by introducing 
new atoms rej(-) which control the applicability of rules with respect to the update 
information 2 . Informally, rej(r) states that rule r is "rejected", in case a more re- 
cent rule r' asserts a conflicting information. This conflict is resolved by enabling 
rej(r) to block the applicability of r, and so rule r' is given precedence over r. 
In some sense, the proposed update mechanism can be seen as some form of 

2 This idea can be found elsewhere in the literature, e.g., (Kowalski & Toni, 1996; Inoue, 2000) 
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an inheritance strategy, where more recent rules are viewed as "more specific" in- 
formation, which have to be given preference in case of a conflict. In Section 7.1, 
we will discuss the relationship between our update formalism and the inheritance 
framework introduced by Buccafurri et al. (1999a). 

The general method of expressing update sequences in terms of single programs 
has already been discussed by Alferes et al. (1998; 2000). However, in that frame- 
work, applicability issues are realized in terms of newly introduced atoms referring 
to the derivability of atoms of the original programs, and not to the applicability 
of rules as in the present approach. A detailed comparison between our approach 
and the method of Alferes et al. (1998; 2000) is given in Section 7.3. 

3.1 Basic Approach 

By an update sequence, P, we understand a series (Pi, . . . , P„) of ELPs. We say 
that P is an update sequence over ^4. iff ^4 represents the set of atoms occurring in 
the rules of the constituting elements Pi of P (1 < i < n). 

Given an update sequence P = (Pi , . . . , P n ) over A, we assume a set A* extending 
A by new, pairwise distinct atoms rej(r) and Ai, for each r occurring in P, each 
atom A £ A, and each i, 1 < i < n. We further assume an injective naming function 
N(-, •), which assigns to each rule r in a program p a distinguished name, N(r, Pi), 
obeying the condition N(r,Pi) ^ N(r',Pj) whenever i ^ j. With a slight abuse of 
notation we shall identify r with N(r, Pi) as usual. Finally, for a literal L, we write 
Li to denote the result of replacing the atomic formula A of L by Ai. 

Definition 2 

Given an update sequence P = (Pi, . . . , P n ) over a set of atoms A, we define the 
update program P < = P\ < . . . < P„ over A* consisting of the following items: 

(i) all constraints in Pi, 1 < i < n; 

(ii) for each r <G Pi, 1 < i < n: 

Li <— B(r), not rej(r) 

(iii) for each r € Pj, 1 < i < n: 

rej(r) <- B(r),->L i+1 

(iv) for each literal L occurring in P (1 < i < n) 

Li <— Li + \\ L <— L\. 

Informally, this program expresses layered derivability of a literal L, beginning at 
the top layer P n downwards to the bottom layer Pi. The rule r at layer Pi is only 
applicable if it is not refuted by a literal derived at a higher level that is incompatible 
with H(r). Inertia rules propagate a locally derived value for L downwards to the 
first level, where the local value is made global. The transformation P < is modular 
in the sense that for P' — (Pi, . . . ,P n , P n +i) it augments P<] = Pi < . . . < P„ only 
with rules depending on n + 1. 

We remark that P<] can obviously be slightly simplified, which is relevant for 
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implementing our approach. All weakly negated literals not rej (r) in rules with 
heads L n can be removed: Indeed, since rej(r) cannot be derived, each such atom 
evaluates to false in any answer set of P < . Thus, no rule from P n is rejected in an 
answer set of P<, i.e., all most recent rules are obeyed. 

The intended answer sets of an update sequence P = (Pi, . . . , P n ) arc defined in 
terms of the answer sets of P< . 

Definition 3 

Let P = (Pi, . . . , P n ) be an update sequence over a set of atoms A. Then, S C Lit a 
is an update answer set of P iff S = S' PI A for some answer set S' of P < . The 
collection of all update answer sets of P is denoted by U{P). 

Following the case of single programs, an update sequence P = (Pi, . . . , P„) is 
regarded as the epistemic state of an agent, and the belief set Bel(P) is given by 
Bel(U(P)). The update sequence Pis said to be satisfiable iff U(P) ^ 0, and P = P 
iff Bel(P) = Bel(P) (P some update sequence). General properties of the belief 
operator Bel(-) in the context of update sequences will be discussed in Section 4. 

For illustration of Definition 3, consider the following example, adapted from 
(Alferes et al, 1998). 

Example 1 

Consider the update of Pi by P 2 , where 

Pi = { ri : sleep <— not tv_on, r 2 : night <— , r$ : tv_on <— , 
r 4 : watch_tv <— tv_on } ; 

P 2 = { r 5 : ^tv_on <— power_failure, r 6 : power -failure <— }. 

The single answer set of P = (Pi, P 2 ) is, as desired, 

5* = {power-failure, ^tv_on, sleep, night}, 

since the only answer set of P<| is given by 

S' = { power_failure 2 , power_failure 1 , power-failure, 

^tv_on 2 , -^tv-oni, ~^tv_on, rej(r^), sleep 1 , sleep, nighty, night }. 

If new information arrives in form of the program P3 : 

P3 = { ry : ~^power_failure <— } , 

then the update sequence (Pi, P 2 , P3) has the answer set 

T = { ^power_failure, tv_on, watch-tv, night } , 

generated by the following answer set T" of Pi < P 2 < P3: 

T" = { ^power_failure 3 ,^power_failure 2 ,^power-failure 1 ,^power_failure, 
rej(r 6 ), tv_on\, tv_on, watch J,V\, watch-tv, night x , night }. 

3.2 Properties and Characterizations 

Next, we discuss some properties of our approach. The first result guarantees that 
answer sets of P are uniquely determined by the answer sets of P< . 
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Theorem 2 

Let P = (Pi, . . . , P n ) be an update sequence over a set of atoms A, and let S,T C 
be answer sets of P<|. Then, S n = Tfl only if 5 = T. 

Proof 

See Appendix A.l. □ 

In view of this result, the following notation is well-defined. 
Definition 4 

Let P be an update sequence over A, and let S be an answer set of P. Then, S 
denotes the (uniquely determined) answer set of P< obeying S = S (1 Lit^. 

If an update sequence P consists of a single program Pi , the update answer sets 
of P coincide with the regular answer sets of Pi . 

Theorem 3 

Let P be an update sequence consisting of a single program Pi, i.e., P = P\. Then, 
U(P)=S(P 1 ). 

Proof 

This follows at once from the observation that the only difference between Pi and 
P< is that each rule r = L <— B(r) occurring in Pi is replaced by the two rules 
L\ <— B(r),notrej(r) and L <— L\. Since there are no rules in P<j having head 
literal rej(r), it holds that, for each set S of literals, r is defeated by S exactly if 
L\ <— B(r), not rej(r) is defeated by S. □ 

Answer sets of update sequences can also be characterized in a purely declarative 
way. To this end, we introduce the concept of a rejection set. Let us call two rules 
n and r 2 conflicting iff H(n) = ->H{r2)- For an update sequence P = (Pi, . . . , P n ) 
over a set of atoms A and S C Lit a, based on the principle of founded rule rejection, 
we define the rejection set of S by Rej(S, P) — U"=i R- e 3i(S, P), where Rej n (S, P) = 
0, and, for n > i > 1, 

Reji(S, P) = { r e P t | 3r' e Pj \ Rejj{S, P), for some j G {i + 1, . . . , n}, 

such that r, r' are conflicting and S \= B(r) U B(r') }. 

That is, Rej(S, P) contains those rules from P which are rejected on the basis of 
rules which are not rejected themselves. 

The next lemma ensures that the rejection set Rej(S,P) precisely matches the 
intended meaning of the control atoms rej(-). 

Lemma 1 

Let P = (Pi, . . . , P„) be an update sequence over a set of atoms A, let S be an 
answer set of P, and let S be the corresponding answer set of P<. Then, r G 
Rej{S,P) iSrej(r) G S. 



Proof 
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We show by induction on j (0 < j < n) that r £ Rej n _j(S, P) iff rej(r) £ S, 
whenever r £ P n -j- 

Induction Base. Assume j = 0. Then the statement holds trivially because 
Rej n (S, P) = and rej(r) <£ S for all r £ P n . 

Induction Step. Assume n > j > 0, and let the statement hold for all k < 
j. We show the assertion for k = j. Consider some r £ P n -j and suppose r £ 
Rej n _j(S, P). We show rej(r) £ S. According to the definition of Rej n _j(S, P), 
there is some r' £ P n -k \ Rej n _ k (S, P), < k < j, such that H(r') = -^H(r), 
B + (r) U B + (r') C S, and both r and r' are not defeated by S. The rule r £ 
P n -j induces the rule rej(r) <— B(r), -ii„_j + i £ P <s , where L = H{r). From 
the properties above, we have rej(r) <— B + (r), ->L„_j + i £ (P<|) 5 . Now, since 
B + (r) C 5 C 5, in order to show rej(r) G S it suffices to show that ->L n _j + i G 5. 
This can be seen as follows. First of all, the rule r' £ P n -k induces the rule L' n _ k <— 
S(r), noi rej(r') £ P<, where L' = H(r'). Since i?(r') = ->H(r), we actually have 
-iL n _k <— B(r), not rej(r') £ P^. Now, given that r' £ Rej n _ k (S, P), and since k < 
j, by induction hypothesis we have rej(r) ^ S. Furthermore, B~(r') PiS = implies 
^L n _ k <- S+(r') £ (P^. Given that B+(r') C S C 5, we obtain -L„_ fe G 5. 
By observing that n — j + 1 < n — k (since fc < j), and given the inertia rules 
->L TO <— -iL m+ i £ (P<) s (1 < m < n), we eventually obtain L„_j + i G 5. This 
proves rej(r) £ S. 

Conversely, assume rej(r) £ S. We show r G Rej n _j(S, P). By construction of 
the update program P < , the atom rej (r) can only be derived by means of the rule 
rej(r) <— B(r), -iL n _j + i G P<. So, it must hold that B + (r) C 5, -ii n _j + i G 5, 
and B~{r) f) S = 0. Moreover, since ->L n _j + i G S, there must be some r' G P n -k, 
k < j, such that ->L„_ fe <- B(r l ),notre ] (r l ) £ P<j, B+(r') C 5, B _ (r') n 5 = 0, 
and rej(r') £ S. By induction hypothesis, the latter fact implies r' ^ Rej n _ k (S, P). 
So, we have that there is some r' £ P n -k \ R e i n -ki^^ P)i ^ < h sucn that H(r') — 
->H(r), B + (r) U B + (r') C S, and both r and r' are not defeated by S. This means 
that r £ Rej n _j(S,P). □ 

It turns out that update answer sets can be characterized in terms of a modified 
Gelfond-Lifschitz reduction, by taking the elements of the respective rejection sets 
into account. In what follows, for a given update sequence P = (Pi, . . . ,P n ), we 
write UP to denote the set of all rules occurring in P, i.e., UP = U"=i Pi- 
Theorem 4 

Let P = (Pi, . . . ,P n ) be an update sequence over a set of atoms A and S C Lit a 
a set of literals. Then, S is an answer set of P iff S is the minimal model of 
(UP\Rej(S, P) f. 

Proof 

See Appendix A. 2. □ 

Update answer sets can also be described using a weaker notion of rejection sets. 
For P = (Pi, . . . , P n ) over A and S C Lit a, let us define 

Rej'(S, P) = U"=i{ r £ P 1 \3r l £ P j: for some j £ {i + 1, . . . , n}, such that 

r and r' are conflicting and S \= B(r) U B(r') }. 
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Obviously, Rej(S,P) C Rej'(S,P) always holds. Moreover, we get the following 
variant of Theorem 4: 

Theorem 5 

Let P — (Pi, . . . ,P n ) be an update sequence over a set of atoms A and S C 
Lii_4 a set of literals. Then, 5 is an answer set of P iff S is a minimal model of 
(UP\Rej'(S,P)) s . 

Proof 

Only-if part. Suppose S is an answer set of UP \ Rej(S,P). Since Rej(S,P) C 
Rej'(S,P), it holds that (UP \ flej'(S, P)) C (UP \ i?ej(S, P)). Observe that for 
each r G Rej'(S, P)\Rej(S, P) there is some r' G ite^S, P) such that i?(r) = H{r') 
and 5 |= B{r) U B(r'). We use the following property: Let 5" be an answer set of 
some program P, and let r, r' e P such that i?(r) = if(r') and S 1 |= P(r) U B(r'). 
Then, S' is an answer set of P \ {r'}. By repeated applications of this property we 
get that S is an answer set of UP\ Rej'(S, P). 

If part. Suppose that S is a minimal model of (UP\ Rej'(S, P)) s , but there is some 
r G (UP\Rej(S,P)) \ (UP \ Rej' (S, P)) such that S (= P(r) and JT(r) g 5". It 
follows that r G i2e/(S, P) \ Rej(S, P). 

Define = {r' G P | JT(r') G {Jf(r), -.JT(r)} and S \= B(r')} and let r' G Q fe , 
where fc = max{i | r' £ Q{\ + 0. Then, r' £ Rej'(S,P). Since ff(r) ^ S, it 
follows that iJ(r') = -i?(r). Furthermore, r' ^ Rej'(S,P) implies r' ^ Rej{S,P). 
Therefore, it follows that r ^ Rej(S,P), a contradiction. We obtain that 5 is a 
model of (UP\Rej(S, P)) s . Moreover, since (UP\Rej'(S, P)) s C (UP\Rej(S, P)) s , 
5 must be a minimal model of (UP\ Rej(S 7 P)) . □ 

We make use of this alternative version of Rej(-, •) in Sections 7.2 and 7.3. 

It is important to emphasize that in our approach, the update program P < is 
not the result of the update intended to be the new knowledge state of the agent, 
but it represents the semantic result of the information that a sequence of updates 
P2, . . . , P n has occurred to a knowledge base Pi. Compiling the result of updates 
into a single logic program in the original language (having the desired answer sets) 
would mean losing history information about the update sequence. Instead, the 
formalism results in a program over an extended set of atoms, which expresses at 
the object level meta-concepts determining applicability of rules and computation 
of those intended answer sets. In some sense, the result is therefore a declarative 
specification of how rules of the original logic program and of subsequent updates 
should be applied, expressed in the language of logic programs themselves. 

4 Principles of Program Updates 

In this section, we discuss several kinds of postulates which have been advocated in 
the literature on belief change and examine to what extent update sequences satisfy 
these principles. This issue has not been addressed extensively in previous work. We 
first consider update programs from the perspective of belief revision and assess the 
relevant postulates from this area. Afterwards, we briefly analyze further properties, 
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like viewing update programs as nonmonotonic consequence operators and other 
general principles. We remark that our analysis applies, in slightly adapted form, 
to dynamic logic programming as well (cf. Section 7.3). 

4-1 Belief Revision 

Following Gardenfors and Rott (1995), two different approaches to belief revision 
can be distinguished: (i) immediate revision, where the new information is simply 
added to the current stock of beliefs and the belief change is accomplished by the 
semantics of the underlying (often, nonmonotonic) logic; and (ii) logic- constrained 
revision, where the new stock of beliefs is determined by a nontrivial operation 
which adds and retracts beliefs, respecting logical inference and some constraints. 

In the latter approach, it is assumed that beliefs are sentences from a given logical 
language Cb, closed under the standard boolean connectives. A belief set, K , is a 
subset of Cb which is closed under a consequence operator Cn(-) of the underlying 
logic. A belief base for if is a subset B C K such that K = Cn(B). A belief base is a 
special case of epistemic state (Darwiche & Pearl, 1997), which is a set of sentences 
E representing an associated belief set K in terms of a mapping Bel(-) such that 
K = Bel(E), where E need not necessarily have the same language as K . 

In what follows, we first introduce different classes of postulates, and then we 
examine them with respect to update sequences. 

4.1.1 AGM Postulates 

One of the main aims of logic-constrained revision is to characterize suitable revision 
operators through postulates. In the AGM approach (after Alchourron, Gardenfors, 
and Makinson (1985)), three basic operations on a belief set K are considered: 

• expansion K + <p, which is simply adding the new information <f> £ Cb to K; 

• revision K * <fr, which is sensibly revising K in the light of 4> (in particular, 
when K contradicts <p); and 

• contraction K — <fi, which is removing <j> from K . 

AGM proposes a set of postulates, K*l-K*8, that any revision operator * map- 
ping a belief set K C Cb and a sentence (f> 6 Cb into the revised belief set K * 4> 
should satisfy. If, following both Darwiche and Pearl (1997) and Brewka (2000), we 
assume that K is represented by an epistemic state E, then the postulates K*l-K*8 
can be reformulated as follows: 

(Kl) E -k cf> represents a belief set. 

(K2) 4> £ Bel(E *<j)). 

(K3) Bel{E*(j>) C Bel(E + <f>). 

(K4) -xj> £ Bel(E) implies Bel(E + <fi) C Bel{E*<j>). 
(K5) _L £ Bel(E*(fi) only if </> is unsatisfiable. 
(K6) cj>i =<p 2 implies Bel(E * <px) = Bel(E*<f) 2 ). 
(K7) Bel(E ★ (0 A tp)) C Bel((E *</>)+ V0- 

(K8) ^ i Bel(E * (j>) implies Bel((E * <f>) + ip) C Bel(E * (<f> A ip)). 
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Here, E * (ft an d E + (ft is the revision and expansion operation, respectively, 
applied to E. Informally, these postulates express that the new information should 
be reflected after the revision, and that the belief set should change as little as 
possible. As has been pointed out, this set of postulates is appropriate for new 
information about an unchanged world, but not for incorporation of a change to 
the actual world. Such a mechanism is addressed by the next set of postulates, 
expressing update operations. 

4-1-2 Update Postulates 

For update operators B o (ft realizing a change (ft to a belief base B, Katsuno and 
Mcndelzon (1991) proposed a set of postulates, U0I-U08, where both (ft and B 
are propositional sentences over a fmitary language. For epistemic states E, these 
postulates can be reformulated as follows. 

(Ul) (fteBel{E<xft). 

(U2) (ft e Bel(E) implies Bel(E o (ft) = Bel(E). 

(U3) If Bel(E) is consistent and (ft is satisfiable, then Bel(E <xft) is consistent. 

(U4) If Bel(E) = Bel(E') and (ft = ift, then Bel(E<xft) = Bel(Eoift). 

(U5) Bel(E o O A tp)) C Bel((E o (ft) + ip). 

(U6) If (ft e Bel(E o tft) and tft E Bel(E o (ft), then Bel(E o (ft) = Bel(E o tft). 

(U7) If Bel(E) is complete, then Bel(E o (ift V V')) £ s ^(£ oip) A Bel(E o V>')). 3 
(U8) V E') oiP) = Bel((E o V) V (£7' o V). 

Here, conjunction and disjunction of epistemic states are presumed to be definable 
in the given language (e.g., in terms of intersection and union of associated sets of 
models, respectively). 

The most important differences between (K1)-(K8) and (U1)-(U8) are that re- 
vision should yield the same result as expansion E + (ft, providing (ft is compatible 
with E, which is not desirable for update in general, cf. (Winslett, 1988). On the 
other hand, (U8) says that if E can be decomposed into a disjunction of states (e.g., 
models), then each case can be updated separately and the overall result is formed 
by taking the disjunction of the emerging states. 

4-1.3 Iterated Revision 

Darwiche and Pearl (1997) have proposed postulates for iterated revision, which can 
be rephrased in our setting as follows (we omit parentheses in sequences (.E*0i)*</>2 
of revisions): 

(CI) If ^2 £ #eZ(V>i), then Bel(E-k%ft 2 *ipi) = Bel(E * ifti). 
(C2) If -.^2 e SeZ(V'i), then Bel(E * %ft x * ift 2 ) = Bel(E * ift 2 )- 
(C3) If t/j 2 E Bel(E * ipx), then tft 2 G Bel(E * ift 2 * Vi). 
(C4) If -.^2 £ Bel(E * Vi), then ^tft 2 £ Bel(E *%ft 2 -k ^). 

3 A belief set K is complete iff, for each atom A, either A G K or -iA £ K. 
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(C5) If -ii[) 2 G Bel(E * Vi) and ^ Bel(E*ip 2 ), then Vi £ Bel(E-kip 1 -kip 2 ). 
(C6) If -.-02 6 Be/(.E*Vi) and -.^1 G Bel(E*i/) 2 ), then ->V>i G Se/(E * Vi * V^)- 

Another set of postulates for iterated revision, corresponding to a sequence E 
of observations, has been formulated by Lehmann (1995). Here, each observation 
is a sentence which is assumed to be consistent (i.e., falsity is not observed), and 
the epistemic state E has an associated belief set Bel(E). Lehmann's postulates 
read as follows, where E, E' denote sequences of observations and "," stands for 
concatenation: 

(11) Bel(E) is a consistent belief set. 

(12) (/) G Bel(E,<j>). 

(13) If V G Bel(E, <t>), then <f> => V G Bel(E). 

(14) If 4> G Bel(E), then Bel(E, <j), E') = Bel(E, E). 

(15) If i> h 4> then Bel(E, 0, -0, £') = Bel(E, ip, E'). 

(16) If -m/j £ Bel(E, 0), then Bel(E, <P, if>, E 1 ) = Bel(E, <p, ip, E'). 

(17) Bel(E, -n<f>, <t>) C Cn(S + (f>). 

4-1-4 Analysis of the Postulates 

In order to evaluate the different postulates, we need to adapt them for the setting 
of update programs. Naturally, the epistemic state P = (Pi, . . . , P n ) of an agent 
is subject to revision. However, the associated belief set Bel(P) (C £ A ) does not 
belong to a logical language closed under boolean connectives. Closing Cj^ under 
conjunction does not cause much troubles, as the identification of finite logic pro- 
grams with finite conjunctions of clauses permits that updates of a logic program 
P by a program P' can be viewed as the update of P with a single sentence from 
the underlying belief language. Ambiguities arise, however, with the interpretation 
of expansion, as well as with the meaning of negation and disjunction of rules and 
programs, respectively. 

Depending on whether the particular structure of the epistemic state E should 
be respected, different definitions of expansion are imaginable in our framework. 
At the "extensional" level of sentences, represented by a program or sequence of 
programs P, Bel(P+P') is defined as Bel(Bel{P) U P'). At the "intensional" level 
of sequences P=(P 1 ,..., P n ), Bel(P+P') could be defined as Bel(P 1 , P n UP'). 
An intermediate approach would be defining Bel(P + P') — Bel^P^ U P'). We 
adopt the extensional view here. Note that, in general, adding P' to Bel(P) does 
not amount to the semantical intersection of P' and Bel(P) (nor of UP and P', 
respectively). 

As for negation, we might interpret the condition -i(f> £ Bel(E) (or -itp £ Bel(E-k 
<f>) in (K4) and (K8)) as satisfiability requirement for E + (p (or (E*(j>) +tf>, respec- 
tively). 

Disjunction V of rules or programs (as epistemic states) appears to be meaningful 
only at the semantical level. The union S(Pi)L)S(P 2 ) of the answer sets of programs 
Pi and P 2 may be represented syntactically through a program P 3 , which in general 
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Tabic 1. Interpretation of Postulates {K1)-(K8) and (U1)-(U6). 



Postulate Interpretation Postulate holds 

(Kl) (P>P) represents a belief set yes 

(K2), (Ul) PCBel((P,P)) yes 

(U2) Bel(P) C Bel{P) implies Bel((P,P)) = Bel{P) no 

(K3) Bel((P, P)) C Bel(Bel(P) U P) yes" 

(U3) If P and P are satisfiable, then (P, P) is satisfiable no 

(K4) If Bel(P) U P has an answer set, then no 

Bel(Bel(P) U P) C BeZ((P, P)) 

(K5) (P, P) is unsatisfiable only if P is unsatisfiable no 

(K6), (U4) P=P and P = P' implies (P, P) = (P , P') no 

(K7), (U5) Bel((P, P U P')) C Bel(Bel((P, P)) U P') yes 6 

(U6) Bel(P') C BeZ((P, P)) and BeZ(P) C BeZ((P, P')) no 

implies BeZ((P, P)) = Bel((P,P')) 

(K8) If Bel((P, P)) U P' is satisfiable, then no 

Bel(Bel((P, P)) U P') C BeZ((P, P U P')) 

a If either P or P has a finite alphabet. 

6 If either (UP) U P or P' has a finite alphabet. 



requests an extended set of atoms. We thus do not consider the postulates involving 
the operator V. 

Given these considerations, Table 1 summarizes our interpretation of postulates 
(K1)-(K8) and (U1)~(U6), and includes references whether the respective prop- 
erty holds or fails. We assume that P, P are sequences of ELPs, and P, P' denote 
single ELPs. Moreover, the notation (P, P) is an abbreviation for the sequence 
(Pi, . . . , P n , P) if P = (Pi, . . . , P n ). Demonstrations and counterexamples concern- 
ing these properties are given in Appendix A. 3, and can be easily adapted for 
dynamic logic programming too. 

As can be seen from Table 1, apart from very simple postulates, the majority of 
the adapted AGM and update postulates are violated by update programs. This 
holds even for the case where P is a single program. In particular, Bel((P, P)) 
violates discriminating postulates such as (U2) for update and (K4) for revision. In 
the light of this, update programs neither have update nor revision flavor. 

We remark that the picture does not change if we abandon extensional expansion 
and consider the postulates under intensional expansion. Thus, also under this view, 
update programs do not satisfy minimality of change. 

The postulates (C1)-(C6) and (II)— (17) for iterated revision are treated in Ta- 
ble 2; proofs of these properties can be found in Appendix A. 4. Observe that 
Lehmann's postulate (13) is considered as the pendant to AGM postulate K*3. 
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Table 2. Interpretation of Postulates (CI) -(C6) and (II) -(16). 



Postulate Interpretation Postulate holds 

(CI) If P' C Bel(P), then Bel((P,P',P)) = Bel((P,P)) no 

(C2) If S ft P', for all S G S(P), then no 
Bel((P,P,P')) = Bel((P,P')) 

(C3) If P' C Bel((P,P)), then P' C Bel((P,P',P)) no 

(C4) If S |= P' for some S £ W((P, P)), then yes 
S |= P' for some S £ W((P, P', P)) 



(C5) If S ^ P' for all S € U((P, P)) and P % Bel((P, P')), 
then P g Bel((P,P,P')) 

(C6) If S ^ P' for all S € W((P, P)) and S ^ P for all 

S €U((P, P')), then S ^ P for all S G U((P,P,P')) 



(11) Bel(P) is a consistent belief set no 

(12) P C Bel((P,P)) yes 

(13) If Lo <— G Bel((P, {Li <—,..., Lfc <— })), then yes 
L <-Li,...,L fc G Be/(P) 

(14) If Qi C Be/(P), then no 
Be/((P, Qi,Q 2 ,..-, Qn)) = 5e/((P, Q 2 , . . . , Q„)) 

(15) If Bel(Q 2 ) C Bel(Qi), then no 
Be/((P, Qi, Q 2 , Q 3 , • ■ ■ , Q n ))=Bel((P, Q 2 , Q 3 , ■ . . , Qn)) 

(16) If S |= Q 2 for some 5 G W((P, Qi)), then no 



Be/((P, Qi, Q 2 , . . . , Q n )) = 5e/((P, Qi, Qi U Q 2 , Q 3 ,. . . , Q n )) 



In a literal interpretation of (13), since the belief language associated with logic 
programs does not have implication, we may consider the case where ip is a default 
literal Lo and 4> — L\ A ■ ■ ■ A Lk is a conjunction of literals Li, such that <f> tp 
corresponds to the rule L <— L\,...,Lk. Moreover, since the negation of logic 
programs is not defined, we do not interpret (17). 

Note that, although postulate (C3) fails in general, it holds if P' contains a single 
rule. Thus, all of the above postulates except (C4) fail, and, with the exception of 
(C3), each change is given by a single rule. 

We can view the epistemic state P — (Pi, . . . , P n ) of an agent as a prioritized 
belief base in the spirit of (Brewka, 1991b; Nebel, 1991; Benferhat et al, 1993). 
Revision with a new piece of information Q is accomplished by simply changing 
the epistemic state to P = (Pi, . . . ,P n ,Q). The change of the belief base is then 
automatically accomplished by the nonmonotonic semantics of a sequence of logic 
programs. Under this view, updating logic programs amounts to an instance of the 
immediate revision approach. 

On the other hand, referring to the update program, we may view the belief 
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set of the agent represented through a pair (P,A) of a logic program P and a 
(fixed) set of atoms A, such that its belief set is given by Bel^{P). Under this 
view, a new piece of information Q is incorporated into the belief set by producing 
a representation, (P' , A), of the new belief set, where P' = P < Q . Here, (a set of) 
sentences from an extended belief language is used to characterize the new belief 
set, which is constructed by a non-trivial operation employing the semantics of logic 
programs. Thus, update programs enjoy to some extent also a logic-constrained 
revision flavor. Nonetheless, as also the failure of postulates shows, they are more 
an instance of immediate than logic- constrained revision. What we naturally expect, 
though, is that the two views described above amount to the same at a technical 
level. However, as we shall demonstrate below, this is not true in general. 



4-2 Update Programs as Nonmonotonic Consequence Relations 

Following Gardenfors and Makinson (1991; 1994), belief revision can be related to 
nonmonotonic reasoning by interpreting it as an abstract consequence relation on 
sentences, where the epistemic state is fixed. In the same way, we can interpret 
update programs as abstract consequence relation on programs as follows. For a 
fixed epistemic state P and logic programs P\ and P 2 , we define 

Pi hp P 2 if and only if P 2 C Bel(P, Pi), 

i.e., if the rules P 2 are in the belief set of the agent after update of the epistemic 
state with Pi . 

Various postulates for nonmonotonic inference operations have been identified 
in the literature. In what follows, we consider some sets of postulates and discuss 
their interpretations in terms of update programs. First of all, we review principles 
discussed by Makinson (1993), who considered a set of (desirable) properties for 
nonmonotonic reasoning, and analyzed the behavior of some reasoning formalisms 
with respect to these properties. Afterwards, we consider postulates proposed by 
Lehmann and Magidor (1992), which deal with properties of so-called preferen- 
tial consequence relations. It is argued that such properties are necessary but not 
sufficient for a preferential consequence relation to be meaningful and useful in 
reasoning. As we will see, updates fail also in satisfying the essential properties. 

Although our analysis is based on the specific semantics expressed by the trans- 
formation of Definition 2, arguably it holds for other update formalisms as well. 
In fact, quite the same pattern can be found for dynamic logic programs (Alfcrcs 
et al., 2000), because, with few exceptions, all proofs and counterexamples hold 
for this formalism too (dynamic logic programming will be discussed in detail in 
Section 7.3). Thus, intuitively, the failure of some basic principles of nonmonotonic 
reasoning in the context of updates stems from the same nature of update semantics 
based on rule rejection, and not on the particular transformation chosen. 
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4-2.1 General Patterns of Nonmonotonic Inference Relations 

Gabbay (1985) was the first to propose the idea that the output of nonmono- 
tonic systems should be considered as an abstract consequence relation, in order 
to get a clearer understanding of the diverse nonmonotonic reasoning formalisms. 
Ensuing research identified several important principles, based on both syntactic 
and model-theoretic considerations. Among the different properties analyzed by 
Makinson (1993), the following principles are amenable for logic programs under 
the standard Gelfond-Lifschitz approach, and can thus be formulated for update 
programs as well: 

(Nl) PiNpPi. 

(N2) If Pi hp Qi A . . . A Q m and Pi A Qi A ... A Q m h P P 2 , then Pi h P P 2 . 

(N3) If Pi hp Qi A... A Q m and Pi h P P 2 , then Pi A Qi A ... A Q m hp P 2 - 

(N4) If Pi hp P 2 , P 2 hp P 3 , . . . , P n hp Pi (n > 2), then {P' | P h P P'} = 

{P' | P 3 hp P'}, for all i,j < n. 

Postulate (Nl) is called Inclusion and coincides with (K2) and (Ul). Properties 
(N2) and (N3) are important nonmonotonic inference principles and are respec- 
tively called Cut and Cautious Monotony. Inference relations which obey both of 
these properties are said to be cumulative. It is well-known that most nonmonotonic 
formalisms arc not cumulative, and several variants of standard nonmonotonic ap- 
proaches have been defined in order to satisfy cumulativity (e.g., (Brewka, 1991a; 
Schaub, 1991)). The last principle, (N4), is called Loop and was first formulated and 
studied by Kraus, Lehmann, and Magidor (1990) as a property of inference rela- 
tions generated by preferential model structures. Roughly speaking, Loop expresses 
a syntactic counterpart of transitivity on the model structure. 

Other properties, additionally studied by Makinson (1993), which cannot be in- 
terpreted for logic programs include Supraclassicality, Absorption, Distribution, and 
Consistency Preservation. We refer the reader to (Makinson, 1993) for more infor- 
mation on these principles. 



4-2.2 Properties of Updates as a Preferential Relation 

Kraus, Lehmann, and Magidor (1990) defined preferential consequence relations as 
binary relations h over propositional formulas satisfying the following properties 
(here, "|=" denotes validity in classical propositional logic): 

(PI) If |= (0 ip) and (p h 7, then ip h 7. 
(P2) If |= (<f> ip) and 7 h <j>, then 7 h ip. 
(P3) 0h0. 

(P4) If <f> h ip and h 7, then h ^ A 7. 
(P5) If <fi h 7 and ip h 7, then (<j> V ip) h 7. 
(P6) If 4> h ip and ^ h 7, then (<p A ip) h 7. 

Rule (PI) is called Left Logical Equivalence and (P2) is the principle of Right Weak- 
ening. Property (P3) coincides with (Nl) and is referred to by Kraus, Lehmann, 
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and Magidor as Reflexivity. (P4) and (P5) are respectively called And and Or. The 
last rule, (P6), is identical with (N3), the principle of Cautious Monotony. 

As noted by the above authors, any assertional relation satisfying (P1)-(P6) also 
satisfies Cut, expressed here as the following rule: 

If <fi A tl> K 7 and <p l~ V 7 ; then <p ^ 7- 

Since not all preferential relations can be considered as reasonable inference pro- 
cedures, Lehmann and Magidor (1992) subsequently defined a more restricted class 
of preferential relations, called rational consequence relations. They show that such 
rational consequence relations give rise to logical closure operations which satisfy 
the principle of cumulativity. Since none of the postulates for rational relations can 
be formulated for logic programs, they are not discussed here. 

4.2.3 Analysis 

The interpretation of postulates (N1)-(N4) in terms of update sequences is given 
in Table 3. The results show that (Nl) and (N2) hold, whereas (N3) and (N4) fail. 
This corresponds to the situation of standard logic programs under the answer set 
semantics. Hence, in some sense, updates do not represent a loss in properties with 
respect to standard answer set semantics. 

Table 3 contains also the interpretation of postulates (P1)-(P6). As a matter 
of fact, since (P3) and (P6) coincide with (Nl) and (N3), respectively, and (P5) 
admits no interpretation in terms of logic programs, only postulates (PI), (P2), 
and (P4) are included in Table 3. Like the failure of (K6) and (U4), the failure of 
postulate (PI) showcases the syntax-dependency of update programs, as equivalent 
programs do not behave the same way under identical update information. Proofs 
and counterexamples for properties (N1)-(N4), (PI), (P2), and (P4) are given in 
Appendix A. 5. 

4-3 Further Properties 

Rounding off our discussion on principles of update sequences, we describe some 
additional general properties which, as we believe, updates and sequences of up- 
dates should satisfy. The given properties are not developed in a systematic manner, 
though, and they are not meant to represent an exhaustive list. Unless stated oth- 
erwise, update programs enjoy these properties. 

Addition of Tautologies: If the program Q contains only tautological rules (i.e., if 
Q contains only rules of the form L <— L), then (P, Q) = P. 

This property is violated, which is also the case e.g. for dynamic logic programs. 
Consider the programs Pi = {a <— }, P 2 = {->a <— }, and P 3 = {a <— a}. Then 
(Pi,P 2 ) has the single answer set {->a}. By updating with P 3 , the interaction be- 
tween Pi and P3 generates another answer set for (Pi,P2,Ps), namely {a}. Note, 
however, that tautological rules in updates are, as we believe, rare in practical 
applications and can be eliminated easily. 
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Table 3. Interpretation of Postulates (N1)-(N4), (PI), (P2), and (P4). 



Postulate Interpretation Postulate holds 



(Nl) Pi G Bel((P, Pi)) yes 

(N2) If (J™ j Qr C BeZ((P, Pi)) and yes 
P 2 C Bel{(P,P 1 UlJ^iQi)), then P 2 C BeZ((P,Pi)) 

(N3) If [J™ i Qi C £e/((P, Pi)) and P 2 C BeZ((P, Pi)), then no 
P 2 CBelffP.AuU^Qi)) 

(N4) If P i+ i C Se/((P, Pi)) (1 < i < n) and no 
Pi C Bel((P,P n )) (n > 2), then 
{P' | P' C BeZ((P, P))} = {P' | P' C Bel((P, Pj))}, 
for all i,j<n 

(PI) If Pi = P 2 and Pi C BeZ((P, Pi)), then no 
P 3 C Bel((P,P 2 )) 

(P2) If Pi |= P 2 and Pi C Be/((P, P 3 )), then no 
P 2 C Bel((P,P 3 )) 

(P4) If P 2 C SeZ((P, Pi)) and P 3 C Pe/((P, Pi)), then yes 
P 2 UP 3 C SeZ((P,Pi)) 



Initialization: (0, P) = P. 

This property states that the update of an initial empty knowledge base yields just 
the update itself. 

Idempotence: (P, P) = P. 

Updating program P by itself has no effect. This property is in fact a special case 
of the following principle: 

Absorption: (P, Q, Q) = (P, Q). 

The next three properties express conditions involving programs over disjoint 
alphabets. 

Update of Disjoint Programs: If P = Pi U P2 is the union of programs Pi,p2 on 
disjoint alphabets A\ and A2, then P <\Q =AiUA 2 (Pi < Q) U (P2 <3 Q). 

Parallel Updates: If P — (P 1; . . . , P n ) is an update sequence over A, and Qi and 
Q2 are programs defined over disjoint alphabets Ai and A2, respectively, then 
Pi<---<P„<(QiUQ 2 ) (Pi < • • • < P n < Qi) U (Pi < • • • < P„ < Q 2 )- 

In other words, the update by non-interfering programs can be done in parallel, 
by merging the respective results. This property is not satisfied: Consider the case 
n = 1, with Pi = P and Q2 = 0. Assuming that the property holds, we would have 
Bel(P < Qi) = Bel((P < Qi) U P), i.e., P holds in (P, Qi) no matter what. This is 
quite obviously not the case. 
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Noninterference: If P\ and P 2 are programs defined over disjoint alphabets, then 
(P,Pi,P 2 ) = (P,P 2 ,Pi). 

That is, the order of updates which do not interfere with each other is immaterial. 

This property is an immediate consequence of the following stronger property: 
Suppose Q C P 2 is a program such that there are no rules r € Q and r 1 G (P 2 \Q)UPi 
with H(r) = ^H(r'). Then, (P, P U P 2 ) = (P, P l U Q, P 2 \ Q). 

Augmented Update: If Pi C P 2 , then (P,Pi,P 2 ) = (P,P 2 ). 

Updating with additional rules makes the previous update obsolete. This property 
is a somewhat stronger, syntactic variant of the postulate (CI) from above, which 
fails. On the other hand, it includes Absorption as a special case. 

Note that (P, P 2 ,Pi) = (P, P 2 ) does in general not hold, which may be desired 
in some cases: Omission of a rule r in P 2 with respect to Pi leaves the possibility 
to violate r. 

As mentioned before, a sequence of updates P = (Pi, . . . , P„) can be viewed either 
from the point of view of "immediate" revision, or as "logic-constrained" revision. 
The following property, which deserves particular attention, expresses equivalence 
of these views (the property is formulated for the case n = 3): 

Iterativity: For any epistemic state Pi and ELPs P 2 and P3 over A, it holds that 
Pi < P 2 < P 3 =A (Pi < Pi) < P 3 - 

However, this property fails. Informally, soundness of this property would mean that 
a sequence of three updates is a shorthand for iterated update of a single program, 
i.e., the result of Pi < P 2 is viewed as a singleton sequence. Stated another way, 
this property would mean that the definition for Pi < P 2 < P3 can be viewed as 
a shorthand for the nested case. Vice versa, this property reads as possibility to 
forget an update once and for all, by incorporating it immediately into the current 
belief set. 

For a concrete counterexample, consider Pi = 0, P 2 = {a <— , ->a <— }, and 
P3 = { a <— }• The program P < — Pi < P 2 < P 3 has a unique answer set, in which a 
is true. On the other hand, (Pi < P 2 ) < P3 has no consistent answer set. Informally, 
while the "local" inconsistency of P 2 is removed in Pi < P 2 < P 3 by rejection of 
the rule ->a <— via P 3 , a similar rejection in (Pi < P 2 ) < P 3 is blocked because of 
a renaming of the predicates in Pi <\ P 2 . The local inconsistency of P 2 is thus not 
eliminated. 

However, under certain conditions, which exclude such possibilities for local in- 
consistencies, the iterativity property holds, given by the following result: 

Theorem 6 

Let P = (Pi, . . . , P m , P m +i, ■ ■ ■ , Pn), n > m > 2 be a sequence of programs over a 
set of atoms A. Suppose that for any conflicting rules r\,r 2 S P,, i < m, one of the 
following conditions holds: 

(i) There is some rule r G Pj, i < j < m, such that either H(r) = H(r\) and 
B(r) C B(n), or H(r) = H(r 2 ) and B(r) C P(r 2 ); 
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(ii) there are rules r' l7 r' 2 G Pj, m < j < n, such that H(rk) = H{r' k ) and 
B{r' k ) C B(rk), k G {1,2}, and no rule r G Pj' exists with j < j' < n and 
H{r) = H(n) or H(r) = H(r 2 ); or 

(iii) B(n) U P>(r 2 ) is unsatisfiable. 

Then: 

Pi < ■ ■ ■ < P n = A (Pi < ■ ■ ■ < P ro ) < P m+ i < ■ ■ ■ < P„. 

The proof of this theorem is technically involving and is not presented here; it 
can be found in (Eiter et at, 2000b). Observe that Conditions (i)-(iii) of Theorem 6 
are simple syntactic criteria, which can be easily checked. 

A weaker version of Theorem 6 may be applied if updates should be incorporated 
instantaneously, by only considering Condition (iii). This condition can be locally 
checked on each update, and is useful, e.g., if Pi <P 2 has already been constructed. 
Since, for any programs Qi and Q 2l the update program Qi < Q 2 does not have 
rules with opposite heads, we can conclude from Theorem 6 that incorporating 
consecutive updates which obey assertion (iii) is equivalent to the update program 
for the sequence of updates. 

Theorem 7 

Let P = (Pi, . . . , P„), n > 2, be an update sequence on a set of atoms A. Suppose 
that, for any conflicting rules r\,r 2 G Pi, % < n, the union P(n) U B(r 2 ) of their 
bodies is unsatisfiable. Then: 

(• ■ • (Pi < P 2 ) < P 3 ) • • • < P„_l) < P n = A Pi < P 2 < P 3 < • • • < Pn- 

In certain cases, the assertions in Theorem 6 can be dropped. One such case is a 
repeated update, i.e., (Pi,P 2 ,P2); see (Eiter et al, 2000b) for more details. 

5 Refined Semantics: Minimal and Strictly Minimal Answer Sets 

A property which update programs intuitively do not respect is minimality of 
change. In general, it is desirable to incorporate a new set of rules P 2 into an 
existing program Pi with as little change as possible. This, of course, requests us 
to specify how similarity (or difference) between programs is understood and, fur- 
thermore, how proximity of programs is measured. In particular, the question is 
whether similarity should be model-based, or syntactically defined. 

Since the semantics of update programs depends on syntax, a pure model-based 
notion of similarity between logic programs seems less appealing for defining mini- 
mality of change. A natural approach for measuring the change which Pi undergoes 
by an update with P 2 is by considering those rules in Pi which are abandoned. This 
leads us to prefer an answer set Si of P = (Pi,P 2 ) over another answer set S 2 if 
Si satisfies a larger set of rules from Pi than S 2 . 

Definition 5 

Let P = (Pi, . . . , P„) be an update sequence. An answer set S G U(P) is minimal 
iff there is no S' G U{P) such that Rej(S', P) C Rej(S, P). 
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Example 2 

Consider the sequence (Pi,P 2 ,P3) from Example 1. Assume that the following 
additional update is received, describing that a TV can also be turned off: 

Pi = { r 8 '■ switched-off <— not tv-on, not power-failure; 
r 9 : tv_on <— not switched-off, not power-failure; 
rio : ->tv.on <— switched-off; 
r n : ^switched-off *— tv-on }. 

While (Pi, -P3) has the single answer set Si = {night, -^power-failure, tv-on, 
watch-tv}, the new sequence P = (Pi, P2, P3, P4) has two answer sets: Si U 
{-iswitched-off} and, additionally, S 2 = {night, -^power-failure, switched-off, -itv-on, 
sleep}. Both answer sets reject rule r6, but S2 rejects r 3 , too. Thus, Si is minimal 
and, corresponding to our intuition, should be preferred to S 2 . 

Minimal answer sets put no further emphasis on the temporal order of updates. 
Rules in more recent updates may be violated in order to satisfy rules from previous 
updates. Eliminating this possibility leads us to the following notion: 

Definition 6 

Let S, S' G U(P), for some update sequence P = (Pi, . . . , P n ). Then, S is preferred 
over S' iff some i G {1, . . . ,n} exists such that (i) i?ejj(S, P) C Rej^S' , P), and 
(ii) Rejj(S,P) = Rejj(S',P), for all j = i + 1, . . . ,n. An answer set S of P is 
strictly minimal, if no S' G U(P) exists which is preferred over S. 

Example 3 

Suppose in the previous example we had observed that the TV was off when the 
power returned, i.e., replace P3 in (Pi, P 2 , P3, P4) by: 

P3 = { r-j : ^power-failures, r' 7 : ^tv-on <— }. 

The modified update sequence P = (Pi, P 2 , P3, P4) yields the same answer sets as 
before: 

51 = {night, ^power-failure, ^switched-off, tv-on, watch-tv}; 

52 = {night, ^power-failure, switched-off, ^tv-on, sleep} . 

However, now both answer sets are minimal: We have Rej(Si, P 1 ) — {r' 7 , rg} and 
Rej(S2,P / ) — {r 3 ,r 6 }. Thus, Rej(Si,P l ) and Rej(S2,P > ) are incomparable, and 
hence both Si and S2 are minimal answer sets. Since in Si the more recent rule of 
P3 is violated, S 2 is the unique strictly minimal answer set. 

We denote by Bel m i n (P) the set of all rules which are true in any minimal answer 
set of an update sequence P. Likewise, Bel str (P) denotes the set of all rules which 
are true in all strictly minimal answer sets of P. 

Let us consider some further example stressing the difference between regular 
update answer sets, minimal answer sets, and strictly minimal answer sets. 

Example 4 
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An agent consulting different sources in search of a performance or a final rehearsal 
of a concert on a given weekend may be faced with the following situation. First, 
the agent is notified by one of the sources that there is no concert on Friday: 

Pi = { ri : ^concert-friday <— }. 

Later on, a second source reports that it is neither aware of a final rehearsal on 
Friday, nor of a concert on Saturday: 

P2 = { r 2 : -ifinaLrehearsaLfriday <—, r 3 : ^concert-Saturdays }. 

Finally, the agent is assured that there is a final rehearsal or a concert on Friday 
and that whenever there is a final rehearsal on Friday, a concert on Saturday or 
Sunday follows: 



P 3 = {ri 

re 
rT 



concert-friday <— not finaLrehearsaLfriday; 
finaLrehearsaLfriday <— not concert-friday; 
concert-Saturday <— finaLrehearsaLfriday, not concert-Sunday; 
concert-Sunday <— finaLrehearsaLfriday, not concert-Saturday }. 



The update sequence P— (Pi,P 2 ,P 3 ) yields three answer sets: 

51 — {finaLrehearsaLfriday, ^concert-friday, concert-Saturday}; 

5 2 = {finaLrehearsaLfriday, ^concert-friday, ^concert-Saturday, concert-Sunday}; 
5*3 = {^finaLrehearsaLfriday, concert-friday, ^concert-Saturday}, 

The corresponding rejection sets are: 

Rej(S u P) = {r 2 ,r 3 }; 
Rej{S 2 ,P) = {r 2 }; 
Rej(S 3 ,P) = {n}. 

Thus, S2 and S3 are minimal answer sets, with S3 being the single strictly minimal 
answer set of P. 



Clearly, every strictly minimal answer set is minimal, but not vice versa. It is 
easily seen that for the case of update sequences involving only two update pro- 
grams, i.e., for update sequences of the form P — (Pi,P 2 ), the notions of strictly 
minimal answer sets and minimal answer sets coincide. As for the AGM postulates, 
inspection shows that minimal and strictly minimal answer sets satisfy the same 
postulates as regular update answer sets, with the exception that (K3) and (K4) 
hold for the former ones. 

Concerning the implementation of minimal and strictly minimal answer sets, in 
Section 6.2 we will show how they can be characterized in terms of ELPs. 
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6 Computational Issues 
6. 1 Complexity 

In this section, we address the computational complexity of update programs. We 
assume that the reader is familiar with the basic concepts of complexity theory; 
e.g., (Johnson, 1990) and (Papadimitriou, 1994) are good sources (for complexity 
results in logic programming, cf. (Schlipf, 1995; Eiter & Gottlob, 1995; Dantsin 
et al., 1997)). In our analysis, we focus on the case of finite, propositional update 
sequences. 

We briefly recall the definitions of the complexity classes relevant in the follow- 
ing analysis. The class NP consists of all decision problems which are solvable in 
polynomial time using a nondeterministic Turing machine, and is the class of 
all decision problems solvable by a nondeterministic Turing machine in polynomial 
time with access to an oracle for problems in NP (£f is also written as NP NP ). 
Furthermore, coNP refers to the class of problems whose complementary problems 
are in NP, and ITf contains the complements of the problems in Ef. 4 All the men- 
tioned classes belong to the polynomial hierarchy: NP and coNP are at the first 
level of the hierarchy, and £f and nf are the second level. As well, NP C and 
coNP C nf . It is widely held that these inclusions are proper. 

It is clear that the complexity of normal logic programs, which resides at the first 
level of the polynomial hierarchy (Marek & Truszczyhski, 1991), is a lower bound 
for the complexity of update programs. For arbitrary updates, the complexity does 
not increase, even if we consider a sequence of updates. 

Theorem 8 

Given an update sequence P = (Pi, . . . , P„) over a set of atoms A, then: 

(i) determining whether P has an answer set is NP-complete; 

(ii) determining whether L G Bel(P) for some literal L is coNP-complete. 

Hardness holds in both cases for n = 1. 
Proof 

The program P < = P\ < Pi < • • • < P. ' n can obviously be generated in polynomial 
time from P = (Pi, . . . ,P n ). Furthermore, deciding consistency of P < is in NP, 
and checking whether L e 2?eZ(P<|) is in coNP. This proves membership. NP- 
hardness and coNP-hardness of the respective tasks is inherited from the complexity 
of normal logic programs (Marek & Truszczyhski, 1991). □ 

Under minimal updates, the complexity of updates increases by one level in the 
polynomial hierarchy. This is no surprise, though, and parallels analogous results 
on update logic programs by Sakama and Inoue (1999) as well as previous results 
on updating logical theories and iterated circumscription (Eiter & Gottlob, 1992; 
Eiter & Gottlob, 1995). 

4 Two decision problems, Di and D2, are complementary (or, D\ and D2 are complements of 
each other) if it holds that / is a yes-instance of D\ exactly if / is a no-instancc of D2. 
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Theorem 9 

Given an update sequence P = (Pi, . . . , P n ) over a set of atoms A and some rule 
r, the following two problems are Il^-complete: 

(i) determining whether r G Bel m i n (P); and 

(ii) determining whether r G Bel str {P)- 

Hardness holds even if n = 2. 
Proof 

We first show that the two tasks are in II f . We treat only task (i); the case of 
task (ii) is analogous. In order to show membership of (i) in nf, we show that the 
complementary problem is in S^. To disprove r G Bel m i n (P), we can construct 
the update program P<] = Pi < P 2 <3 • • • <1 P n in polynomial time from P and 
guess an answer set S C A* of P < such that S ty= r and where S = S fl A is a 
minimal answer set of P (recall that S <E U(P) is minimal iff there is no T G U(P) 
such that Rej(T, P) C i?ej(S, P)). With the help of an NP-oracle, the guess for S 
can be verified in polynomial time. This concludes the proof that checking whether 
r G 1 Bel m in 

(P) is in . 

Hardness of both tasks is shown by a simple reduction from the IT^-hard irrele- 
vance test in abduction from normal logic programs (Eiter et at, 1997b), which is 
the following problem: Given a normal logic program P, a set of atoms H , a set of 
literals M , and an atom ho G H , decide whether ho is not contained in any minimal 
brave explanation of M, i.e., decide whether ho ^ E holds for each minimal E C H 
(with respect to inclusion) such that P U E has some stable model S with S \= L, 
for all L G M. 

The reduction is defined as follows: For each h G H, let h' and h" be fresh atoms, 
and consider the update sequence P= (Pi,P 2 ), where 

Pi = {-./i' <- \heH}, 

P 2 = P U { <- notL\ L G M} U {/i <- ft', h' <- not ft", ft" ^ notti \heH}. 

It can be shown that there is a one-to-one correspondence between the rejection sets 
Rej(S, P) of the minimal answer sets 5 of P and the minimal brave explanations E 
for M. In particular, the rule -iftg <— is in Rej(S) iff fto belongs to the corresponding 
minimal explanation _E. It follows that fto <— G Bel m i n (P) iff fto is not contained 
in any brave explanation for M, which establishes Ilf -hardness of (i). Since the 
notions of minimal and strictly minimal answer sets coincide for update sequences 
of length 2, we have that Bel m i n (P) = Bel str (P)- Thus, nf -hardness of (ii) holds 
as well. □ 

Similar results hold in the approach of Inoue and Sakama (1999). Furthermore, 
they imply that minimal and strictly minimal answer sets can be polynomially 
translated into disjunctive logic programming, which can serve as a basis for im- 
plementation purposes. The next section deals with some algorithmic issues. 
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6.2 Implementation 

The notion of update sequence can be easily extended to the case where rules may 
contain variables. As usual, the semantics of a program P containing variables is 
defined in terms of the semantics of its ground instances P* over the Herbrand 
base. Rules r with variables X = X\, . . . ,X n are denoted r(X), and rejection of r 
is represented by a predicate rej r (X); further details, can be found in (Eiter et al, 
2000b). In the rest of this section, we consider function- free update sequences P. 

Since answer sets of (first-order) update sequences are defined by answer sets of 
(first-order) ELPs, it is relative straightforward to implement the current update 
approach. In fact, an implementation can be built on top of existing solvers for 
answer set semantics. In the present case, we implemented updates as a front-end 
for the logic programming tool DLV (Eiter et al., 1997a; Eiter et al., 1998). The lat- 
ter system is a state-of-the-art solver for disjunctive logic programs (DLPs) under 
the answer set semantics. It allows for non-ground rules and calculates answer sets 
by performing a reduction to the stable model semantics. (Another highly efficient 
logic programming implementation, realizing stable model semantics, is the system 
smodels (Niemela & Simons, 1996), which would similarly fit as underlying reason- 
ing engine. We chose DLV because of familiarity and its optimization techniques for 
grounding, as well as its expressiveness which would allow an integral solution to 
compute strict and strictly minimal answer sets, respectively.) Formally, DLPs are 
defined as ELPs where disjunctions may appear in the head of rules; the answer set 
semantics for DLPs is due to Gelfond and Lifschitz (1991). 

The implemented tasks agree with the decision problems discussed in the previous 
section, i.e., they comprise the following problems: (i) checking the existence of an 
answer set for a given update sequence, (ii) brave reasoning, and (iii) skeptical 
reasoning; as well as the corresponding problems for minimal and strictly minimal 
answer sets. All of these tasks have been realized for first-order update sequences, 
employing the advanced grounding mechanism of DLV. 

As regards the implementation for minimal and strictly minimal update answer 
sets, although in principle it is possible to express the corresponding reasoning tasks 
in terms of DLPs (which is a consequence of Theorem 9 and well-known express- 
ibility results for the disjunctive answer set semantics (Eiter et al., 1997c)), we 
chose instead to pursue a two-step evaluation approach for our purposes, remain- 
ing within the present non-disjunctive framework, and, at the same time, adhering 
more closer to the underlying intuitions. Roughly speaking, this two-step approach 
can be described as follows: First, all candidates for minimal (strictly minimal) an- 
swer sets are calculated, i.e., all answer sets of the update program P < . Afterwards, 
every candidate is tested for being minimal (strictly minimal). 

Testing a candidate, S, for minimality (strict minimality) is performed by eval- 
uating a test program, p™ m (_p^" c ), consisting of the rules of P<] and a set of 
additional rules. Intuitively, the additional rules constrain the answer sets of p™ m 
(Pg rlct ) to those answer sets of P<] having a smaller set of rejected rules compared 
to the rules rejected by S (or to those answer sets of P^ preferred over S, respec- 
tively). Hence, the candidate S is minimal (strictly minimal) if the corresponding 
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test program p™ m (Pg" c ) has no answer set. In the following subsections, the 
implementation approach is described more formally. 

6.2.1 Minimal Answer Sets 

Definition 7 

Let P<| = Pi < . . . < P n be a (first-order) update program and S an answer set of 
P<. Let ofc be a new miliary predicate symbol (i.e., propositional atom) and, for 
each predicate symbol rej r occurring in P < , let s r be a new predicate symbol of 
the same arity as rej r . Then, the minimality-test program with respect to S, P™ m , 
consists of all rules and constraints of P<j, together with the following items: 

(i) for each predicate symbol rej r occurring in P<j: 

<- rej r (X),nots r (X); 

(ii) for each ground formula rej r (t) e S: 

ok <— notrej r (t); 
s r (t) <- ; 

(iii) the constraint 

<— not ok. 

Note that in the above definition, only the rules and facts of (ii) manifest the 
dependence of p™ m from 5. Informally, the constraints (i) eliminate all answer 
sets with rejection sets which cannot be subsets of Rej(S, P), i.e., which reject at 
least one rule not rejected in S. In the remaining answer sets, if any, either ok is 
true, i.e., at least one rule which is rejected in S is not rejected in such a set, or ok 
is false, in which case their rejection sets equal Rej(S, P), and thus these sets are 
eliminated by Constraint (iii). Actually, the following proposition holds: 

Theorem 10 

Let S be an answer set of P < . Then, S is a minimal answer set of P< iff p2? m has 
no answer set. 

Proof 

Only-if part. Suppose p™ m has an answer set S' . Then ok must be true in S' 
due to the constraint (iii) of Definition 7. Since rules (ii) of Definition 7 are the 
only ones in pg"™ with head ok, there exists a ground term rej r (t) G S such that 
rej r (t) £ S' . Moreover, no ground term rej r ,(t) 6 S' \ S can exist due to the 
constraints (i) of Definition 7. (Observe that rej r ,(t) £ S implies s r /(t) ^ S"; hence, 
if rej r ,(t) E S', then the body of one of the constraints is true in 5".) This proves 
Rej (S' , PT n ) - Rej (S',P)C Rej (S,P). 

Since the predicate symbols ok and s r do not occur in P <1 , and p™ m contains 
all rules and constraints of P < , results on the splitting of logic programs (Lifschitz 
& Turner, 1994) imply that S = S' \ ({ok} U {s r (t) | s r (t) e S'}) is an answer set 
of P < . Given that Rej(S,P) = Rej(S',P) C Rej(S,P), we obtain that S is not 
minimal. 
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Algorithm ComputeJVlinimaLModels(P) 

Input: A sequence of ELPs P — (Pi ,. . . ,P n ). 
Output: All minimal answer sets of P. 

var Cands : SetOfAnswerSets; 
var MinModels : SetOfAnswerSets; 
Cands := Compute_Answer_Sets(P <} ); 
for all S 6 Cands do 

var Counter : SetOfAnswerSets; 

Counter := Compute .Answer _Sets(P™ m ); 

if (Counter = 0) then 

MinModels := MinModels U {S}; 

fi 

rof 

return MinModels; 
Fig. 1. Algorithm to calculate minimal answer sets. 



If part. Suppose S is not minimal. Then there exists an answer set S of P< with 
Rej{S, P) C Rej(S, P). Consider S' = S U {ok} U {s r (t) | rej r (t) £ 5}. It is easily 
verified that S is an answer set of p™ m . □ 

This result allows us to calculate all minimal answer sets of P< using the straight- 
forward algorithm depicted in Figure 1, which proceeds as follows: compute all an- 
swer sets of P< and check for every answer set S if the corresponding minimality- 
test program p™ m has at least one answer set. If not, then add S to the set of 
minimal answer sets of P<|. 

6.2.2 Strictly Minimal Answer Sets 

Definition 8 

Let P < = Pi <]...<] P n be a (first-order) update program and S an answer set of 
P<j. Let ok, oki (1 < i < n), and eqi (1 < i < n + 1) be new miliary predicate 
symbols, and, for each predicate symbol rej r occurring in P < , let s r be a new 
predicate symbol of the same arity as rej r . Then, the program p|*" ct consists of 
all rules and constraints of P < , together with the following items: 

(i) for each predicate rej r occurring in P <7 corresponding to r e fl: 

<- rej r (X), not s r (X),eq i+1 ; 

(ii) for each ground term rej r (t) e S, corresponding to r e P,: 

oh <- notrej r (t),eq l+1 ; 

s r (t) <- ; 

(iii) for 1 < i < n: 

eq l <— eq i+1 ,notoki; 
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ok <— oki ; 

(iv) the constraint 

<— not ok 

and the fact 

eq n +i <— • 

Again, program p s * nct depends on S only in virtue of Item (ii). The constraints 
of Item (i) eliminate all answer sets 5" which cannot be preferred over S because 
at some level i they reject a rule not rejected in S, and Rejj(S, P) = Rejj(S', P) 
holds for j = i + 1, ... ,n (expressed by eq^i). In the remaining answer sets, if 
there is any, ok is either true, or false. If ok is true in S', then oki is true in 5" 
for some level i, i.e., S' does not reject a rule of Pi which is rejected in S, and 
Rejj(S, P) = Rejj(S', P) for j = i + 1, . . . , n. In this case, S' is preferred over S. 
If, however, ok is false in 5", then Rej^S, P) = Rej^S', P), for i = 1, . . . , n, and 
5' is killed by the constraint of Item (iv) . 

An equivalent result as for minimality-test programs holds for the above test 
programs as well. Hence, the same algorithm using p s ^" ct instead of p^- m can be 
used to compute all strictly minimal answer sets of P < . 

Theorem 11 

Let S be an answer set of P < . Then, S is a strictly minimal answer set of P< iff 
P|*" c * has no answer set. 

Proof 

Only-if part. Suppose p^,*" c * has an answer set S'. Then ok must be true in S' , 
due to Constraint (iv) of Definition 8. Since the rules of Item (iii) of Definition 8 
are the only ones in p|*" c * with head ok, there exists some i, 1 < i < n, such that 
oki G S' . This implies that the body of the corresponding rule of (ii) must be true 
in 5'. Hence, there exists a ground term rej r (t) G S \S', where r G Pi and such 
that eqi + i G S'. Moreover, except for the fact eq n+ i <— , the rules of (iii) are the 
only ones in p s ^" ct with eq predicate symbols in their heads, so that eqi+i implies 
eqj G S' and okj £ S' for j = i + 1, . . . , n if i < n. From this, and the constraints 
of (i), it follows that no ground term rej r ,(t)S' \ S , r' G Pj , j = i, . . . , n, can exist 
(rej r ,(t) $l S implies s r >(t) £ S'; hence, having rej r ,(t) G S' and eqj + i G S", the 
body of one of the constraints is true in S'). It also follows that for every r 1 G Pj, 
j = i + 1, . . . , n, if rej r , (t) G S, then rej r , (t) G S' (otherwise the body of one of the 
rules of (ii) would be true in S', implying okj G S", a contradiction). 

Summarizing, we have shown Rej^S', P|*" c *) = Rej^S^P^) G Rej^S^P^ 
and Rejj(S', p?*" c *) = Rejj(S', P K ) = Rej^S, P<), for j = i + 1, . . . , n. So, S' is 
preferred over S. 

Since none of the predicate symbols ok, eq, and s r occurs in P < , and p^" ct 
contains all rules and constraints of P<j, by a similar argument as in the proof 
of Theorem 10 (i.e., invoking splitting results from (Lifschitz & Turner, 1994)) it 
follows that 



S = S'\ {{ok, oh} U {eqj | j = i + 1, . . . , n + 1} U {s r (t) | s r (t) G S"}) 
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is an answer set of P < . Given that Rej(S, P<) = Rej(S', P<), we obtain that S is 
preferred over S. Consequently, S is not a strictly minimal answer set. 

If part. Suppose S is not a strictly minimal answer set. Then there exists an answer 
set S of P<] which is preferred over S. In particular, there exists some i, 1 < i < n, 
such that Rejj(S, P<]) = Rej^S.P^) for j = i + 1, ...,n and Rej^S.P^) C 
Rej^S, P<). Consider 

S" = 5 U {ofc, o£;J U {eg 3 | j = i + 1, . . . , n + 1} U {s r (t) | rej r (t) e S*}. 

It is easily verified that 5 is an answer set of p£ rlct . □ 

7 Relations to Other Approaches 

In this section, we analyze the relations between the current update framework and 
other formalisms. First of all, we discuss the connection with inheritance programs 
by Buccafurri et al. (1999a), which has not been introduced as a formalism for 
updates but can be successfully interpreted as such, coming to an equivalence result 
with our update sequences over the common fragment. 

In a second step, we study the relation on the one hand to the approach of 
Leite and Pereira (1997), also modeling Revision Programming by Marek and 
Truszczyhski (1994), on the other hand to dynamic logic programming (Alfcrcs 
et al., 1998; Alferes et al., 2000), which is close in spirit to the present update 
method, in the sense that update sequences are translated to standard logic pro- 
grams. In particular, we describe the semantical differences between our update 
programs and dynamic programs, and identify a wide class of logic programs for 
which they yield the same results. 

Then, we briefly discuss update approaches for logic programs based on preference 
handling (Zhang & Foo, 1998) and abduction (Inoue & Sakama, 1999). Finally, we 
mention a method due to Dclgrandc, Schaub, and Tompits (2000) for handling 
preference information in the context of logic programs, which is also based on an 
encoding to ELPs. 

7.1 Relation to Inheritance Programs 

The update semantics we suggest resolves conflicts by assigning "preference" to 
the more recent information. As already pointed out earlier, this can also be inter- 
preted as some form of inheritance mechanism, where the more recent information 
is considered as being more specific. In this section, we discuss this aspect in more 
detail. To wit, we consider the inheritance approach introduced by Buccafurri et 
al. (1999a) and we show that update sequences can equivalently be described in 
terms of inheritance programs. 

In what follows, we briefly describe the basic layout of the inheritance approach 
by Buccafurri et al. (1999a). Since that method has originally been specified for 
non-ground DLPs, and we deal here only with non-disjunctive ELPs, we adapt 
some of the original definitions accordingly. 

A DLP < -program, P < , is a finite set {{oi,P\), . . . , (o n ,P n )} of object identifiers 
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Oi (1 < i < n) and associated ELPs Pi, together with a strict partial order "<" 
between object identifiers ( pairs (oi, Pi) are called objects). 5 As well, we say that P < 
is a DLP < -program over a set of atoms A iff A denotes the set of all atoms appearing 
in P < . Informally, possible conflicts in determining properties of the objects are 
resolved in favor of rules which are more specific according to the hierarchy, in the 
sense that rule r G P& is considered to represent more specific information than rule 
r' G Pi whenever Ok < oi holds (1 < k, I < n and k ^ I). In the following, p(P < ) 
denotes the multiset of all rules appearing in the programs of P K . 

Consider some DLP < -program P< over a set of atoms A. Let / C Litj, be 
an interpretation and let n G P and r 2 € P' be two conflicting rules, where 
(o,P), (o',P') G P < . Then, r\ overrides r 2 in I iff (i) o < o' , (ii) H(r\) is true in 
/, and (hi) B{r2) is true in /. A rule r G p(P < ) is overridden in I iff there exists 
some r' G p(P < ) which overrides r in /. 

An interpretation / C Lit a is a model of P < iff every rule in p(P < ) is cither 
overridden or true in /; moreover, / is minimal iff it is the least model of all 
these rules. The reduct, Gi(P < ), of the DLP < -program P< relative to I results 
from p(P < ) by (i) deleting any rule r G p(P K ) which is either overridden in I 
or defeated by /; and (ii) deleting all weakly negated literals in the bodies of the 
remaining rules of p(P < ). Then, / is an answer set of P < iff it is a minimal model 
ofGj(P<). 

This concludes our brief review of the inheritance framework of (Buccafurri et al., 
1999a); we continue with our correspondence result. 

Theorem 12 

S C Lit a is an answer set of the update sequence P — (Pi, . . . , P n ) over A iff S is an 
answer set of the DLP < -program P< = {(o\, Pi), . . . , (o n ,P n )} having inheritance 
order o n < o n _i < • • • < 0\. 

Proof 

We first note the following two properties, which can be verified in a straightforward 
way. Let I C Lit a be some interpretation and r G p(P < ). Then: 

(i) If r G Rej(I, P), then r is overridden in /. 

(ii) Assume I satisfies for any r' G p(P < ) the condition that B(r') is true in / 
whenever H (r r ) is true in /. Then, r is overridden in / only if r G Rej{I, P). 

We proceed with the proof of the main result. Suppose S is an answer set of P = 
(Pi, . . . , P„). We show S is an answer set of P< = {{o\, Pi), . . . , (o n ,P n )} with 
inheritance order o„ < o„_i < ■ • • < o\. 

First, we show that S is a model of Gs(P < ). Consider some r G Gs(P < )- Then, 
there is some rule f G p(P < ) such that r = f + and f is neither overridden in 
S nor defeated by S. Applying Property (i), we get that f ^ Rej(S,P). Hence, 
f G (UP\ Rej(S, P)) s since f is not defeated by S. Thus, given that S is an answer 

5 Strictly speaking, in the current context, the term "DLP*- -program" (as introduced by Bucca- 
furri et al. (1999a)) is a bit of a misnomer, because "DLP" points to disjunctive logic programs; 
however, we retained the original name for reference's sake. 
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set of P, Theorem 4 implies that r = f + is true in S. It follows that S is a model 
of Gs(P<). 

Next, we show that there is no proper subset of S which is also a model of 
Gs(P < )- Suppose there is such a set So C S. Since S is an answer set of P, 
Property (ii) can be applied, and we obtain r G Gs(P < ) whenever r G (UP \ 
Rej{S 1 P)) s holds. As a consequence, So is a model of r G (UP\ Rej{S 1 P)) s , which 
contradicts the fact that S is an answer set of P. This concludes the proof that S 
is an answer set of P K if S is an answer set of P. 

For the converse direction, assume S is an answer set of P K . Similar to the argu- 
mentation given above, Property (ii) implies that S is a model of (LiP\Rej(S, P)) s . 
As well, S is a minimal model of (UP\ Rej(S, P)) s , because otherwise Property (i) 
would yield a proper subset So of S being a model of Gs{P < ), contradicting the 
fact that such a subset So cannot exist, because S is an answer of P < . □ 

Inheritance programs are also related to ordered logic programs, due to Laenens et 
al. (1990) and further analyzed by Buccafurri et al. (1996). The difference between 
inheritance programs and ordered logic programs is that the latter ones have a built- 
in contradiction removal feature, which eliminates local inconsistencies in a given 
hierarchy of programs. Thus, for linearly ordered programs Pi < P 2 < ■ ■ ■ < P n 
where such inconsistencies do not occur, e.g., if for any two conflicting rules in Pi 
(1 < i < n) their bodies cannot be simultaneously satisfied, the above equivalence 
result holds for ordered logic programs as well. 

7. 2 Revision Programs and the Approach of Leite and Pereira 

In the framework of Marek and Truszczyhski (1994), a knowledge base is a collection 
of positive facts, and revision programs specify conditional insertions or removals 
of facts under a semantics very similar to the stable semantics. In discussing this 
approach, Leite and Pereira (1997) argued that the approach of revision programs 
is not adequate if more complex knowledge is represented in the form of logic pro- 
grams, because revision programs compute only "model-by-model updates" , which 
do not capture the additional information encoded by logic programs. Accordingly, 
they proposed an extended framework in which a suitable inertia principle for rules 
realizes the update independently of any specific model of the original program. In 
the following, we briefly sketch their approach. 

In a first step, Leite and Pereira (1997) define their approach for normal logic 
programs, and afterwards they extend it to handle programs with strong negation 
as well. Furthermore, (Leite & Pereira, 1997) deals only with the situation where a 
given program is updated by a single program; the general case involving an arbi- 
trary number of updates is described in (Leite, 1997). We describe here the latter 
approach, but, for the sake of simplicity, only the case of normal logic programs. 

Following the method of revision programs (Marek & Truszczyhski, 1994), an 
update program in the sense of (Leite & Pereira, 1997) is a finite collection of rules 
of the form 

in(A) <— in(Bi), . . . , in(B m ), out(C\), . . . , out(C n ), and (1) 
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out{A') <- in(B[),...,in(B' m ),out(C[),...,out(C' n ), (2) 

where A, A 1 , B t , P/, Cj, Cj are atoms (1 < i < m, 1 < j < n). Intuitively, Rule (1) 
states that A should be true given that B\ , . . . , B m are true and C\ , . . . , C n are 
false, and a similar meaning holds for Rule (2). Rule (1) is called an in-rule, and 
Rule (2) is an out-rule. Semantically, in-rule (1) is interpreted as the logic program 
rule 

A <- Bi, . . . ,B m ,notC\, . . . ,notC n , 

whilst out-rule (2) is interpreted as 

-*A <— Bi,...,B m ,notCi,...,notC n . 

When speaking about update programs, in the following they are always identified 
with finite sets of rules of the above form. Let us call a sequence P = (Pi, . . . , P n ) 
of such programs an 10- sequence (for "sequence of in- and out-rules"). Consider 
an IO-sequence P = (Pi, . . . , P n ) over A, and let S C Lit^ be a set of literals. 
Leite (1997) introduces the following notion of a rejection set (for 1 < i, j < n): 

Rejected(S,i,j) = {J i<k< j{ r E Pi | 3r' e Pk such that r and r' are conflicting 

and S h B(r) U B(r') }. 

Then, S fl A is a P '-justified update at state j (1 < j < n) iff S is an answer set of 

\J(Pi\Rejected(S,i,j)), 

i<j 

provided that each program U i< j(Pj \ Rejected(S,i,j)), for I < j, possesses an 
answer set. 6 

It is easily seen that for P = (Pi, . . . , P n ) and S as above, S is an answer set of 
\J i<n (Pi\Rejected(S, iff it is an answer set ofUP\Rej'(S, P), where Rej'(S, P) 
is the weak form of a rejection set, as defined in Section 3.2. Hence, we can state 
the following proposition: 

Theorem 13 

Let P = (Pi, . . . , P„) be an IO-sequence over A and S C Litj, a set of literals. 
Assume that each subsequence (Pi, . . . , Pj) has an answer set, for 1 < j < n. Then, 

5 is an answer set of P iff it is a P-justified update at state n. 

Concerning the extended framework of Leite and Pereira in which rules of the 
form (1) and (2) may contain literals instead of plain atoms, only a weaker cor- 
respondence result holds. Omitting further details, we just mention that in this 
case our framework corresponds to Leite and Pereira's providing update sequences 
contain only in-rules. 

6 Strictly speaking, Leite (1997) requires that, for each I < j, [J i<l (Pi \ Rejected(S,i, j)) has a 
consistent answer set. However, in our setting, answer sets are always consistent. 
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7.3 Dynamic Logic Programming 

Alferes et al. (1998; 2000) introduced the concept of dynamic logic programs as 
a generalization of both the idea of updating interpretations through revision pro- 
grams (Marek & Truszczyhski, 1994) and of updating programs as defined by Alferes 
and Pereira (1997) and by Leite and Pereira (1997). Syntactically, dynamic logic 
programs are based on generalized logic programs (GLPs), which allow default nega- 
tion in the head of rules, but no strong negation whatsoever. 

In dynamic logic programming (DynLP in the following), the models of a sequence 
of updates are defined as the stable models of the program resulting from a syntactic 
rewriting, similar to the transformation used in our approach. This is called a 
dynamic update. Elements of the sequence are GLPs. 

Regarding the formalisms discussed in the previous subsection, in (Alferes et al., 
2000) it is demonstrated that revision programs and dynamic updates are equiv- 
alent, provided that the original knowledge is extensional, i.e., the initial program 
contains only rules of the form A <— or not A <— . 

Our analysis of dynamic updates can be summarized as follows. First, basic def- 
initions and semantical characterizations of dynamic update programs are given. 
Afterwards, the relation between dynamic updates and updates according to Defini- 
tion 2 is investigated. Since the two approaches are defined over different languages, 
the comparison must include suitable translations to take this distinction into ac- 
count. As a matter of fact, Alferes et al. (2000) already discussed how ELPs can 
be handled within their framework; likewise, we define a similar translation schema 
such that GLPs can be treated by our update method. 

As it turns out, there is a semantic difference between dynamic updates and up- 
dates according to Definition 2. Although any dynamic update is an update answer 
set in the sense of Definition 2, the converse does not hold in general. Intuitively, this 
can be explained by the fact that dynamic updates are more restrictive as regards to 
certain circularities in the given update information. On the other hand, we provide 
sufficient conditions under which both approaches yield equivalent results. These 
conditions are formulated by means of suitable graph-theoretical concepts and ef- 
fectively eliminate the possibility of such circular behavior as mentioned above. 
We also briefly discuss that dynamic logic programs do not eliminate all kinds of 
circularities. 

In view of this equivalence over a wide class of logic programs, the analysis of 
update principles we presented in Section 4 applies to dynamic logic programs as 
well. Furthermore, similar complexity results for dynamic logic programs can be 
concluded, based on the constructions in Section 6.1. 

7.3.1 Semantics of Dynamic Logic Programs 

Given an update sequence P = (Pi, . . . , P n ) of GLPs over A, let Ad yn be A extended 
by new, pairwise distinct atoms A~ , Ai, A~ , Ap t , Ap,, and reject(Ai), for each 
A E A and each i G {1, . . . , n}. The dynamic update program P e = Pi © • • • © P n 
over Adyn is defined as the GLP consisting of the following items: 
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Fig. 2. "Top-down" evaluation of update sequences (left diagram) vs. "bottom-up" 
evaluation of dynamic logic programs (right diagram) . 

(i) for each refl, 1 < i < n, with B~{r) = {C\, . . . , C n }: 

A Pi - B+ir),^,...^- if H(r)= A; 
A~ Pi <- B+(r),C 1 -,...,C- if H(r) = not A; 

(ii) for each atom A occurring in P and each i S {l,...,n}: 

Ai <- A Pi ; reject{AT_^ <- A Pt ; 

AT <- A p .; reject (Ai_i) <- Ap.; 

<- 1 , nof reject ( Ar_ : ) ; 
^ <— Ai-\,not reject (Ai-i); 

(iii) for each atom A occurring in P: 

Aq < ^ A < A-n? A 4 5 710^ A < A, n . 

One major difference can immediately be identified between our update pro- 
grams and dynamic updates: In dynamic updates, the value of each atom is de- 
termined from the bottom level P\ upwards towards P n (in virtue of rules Ai <— 
j4j_i, not reject(Ai_i) and A <— A n for positive atoms, and the corresponding ones 
for dashed atoms), whilst update programs determine such values in a downward 
fashion (cf. rules Li <— L i+ i and L <— Li in Definition 2). This difference is visually 
depicted in Figure 2. More importantly, the different evaluation strategy leads in 
effect to different semantics, which will be shown later on. 

Before we can properly define the semantics of dynamic updates, based on the 
transformation P e introduced above, we must emphasize that Alferes et ai (1998; 
2000) use a slightly non-standard concept of stable models. To wit, weakly negated 
literals not A (A some atom) are treated like ordinary propositional atoms, so that 
rules A <— A\, . . . , A m , not A m+ i, . . . , not A n are effectively be viewed as proposi- 
tional Horn formulas. Accordingly, an interpretation / is in this context understood 
as a set consisting of atoms and weakly negated atoms such that for each atom A 
it holds that A e I iff not A £ I. To distinguish such interpretations from inter- 
pretations in the usual sense, we call them generalized interpretations. As usual, 
a set B, comprised of atoms and weakly negated atoms, is true in a generalized 
interpretation /, symbolically / |= B, iff B C I. Towards defining stable models, 
the following notation is required: 
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Let A be a set of atoms. Then, not A denotes the set {not A \ A <E A}. Fur- 
thermore, for M C A U not A, we set M~ = {not A \ not A e M}, and, for 
Z e AU not A, we define not Z = not A if Z = A and not Z = A if Z = not A. For 
a program P over A, the deductive closure, Cn^(P), is given by the set 

{L | L e A U not A and P h L}, 

where P is interpreted as a prepositional Horn theory and "h" denotes classical 
derivability. Usually, the subscript "A" will be omitted from Cn^(P). A generalized 
interpretation 5 is a stable model of a program P iff 5 = Cn(P US'"). 

Let P = (Pi, . . . , P n ) be a sequence of GLPs over A, and let / be a generalized 
interpretation. Alferes et al. (1998; 2000) introduce the following concepts: 

Rejected(I, P) — U"=i{ r e ^ I ~^ r ' e f° r somc 3 S {« + 1, ■ • • , n}, such 

that P(r') = notH{r) and J |= B{r) UP(r')}; 
Defaults(I, P) = {not A \ in P such that P(r) = A and J |= P(r)}. 

Then, it holds that 5' C Ad yn is a stable model of P® iff 5 = S' fl ^4 satisfies the 
following condition: 

S = Cn((UP \ Rejected(S, P)) U Defaults (S, P)). 

The set is called a dynamic stable model of P. 

Alferes et a/. (2000) defined also an extension of their semantics to the three- 
valued case: Let P = (Pi , . . . , P„) be a sequence of ELPs over A. Then, a consistent 
set S C Lit a is a dynamic answer set of Piff SU{not L \ L e Lit^\S} is a dynamic 
stable model of the sequence P = (Pi, . . . , P n U {no£ ^4 <— ^^4, not ^^4 <— A \ A G 
^4}) of GLPs. Here, the rules in {not A <— ->A, not ^A <— A \ A 6 A} serve for 
emulating classical negation through weak negation. 



7.3.2 Relating Dynamic Answer Sets and Update Answer Sets 

Let us now define how GLPs are to be rewritten in order to constitute a valid input 
for update programs according to Definition 2. For any rule r, by r° we denote the 
rule which results from r by replacing weak negation occurring in the head of r by 
strong negation, i.e., 




^A^B(r) if H{r) = not A; 



Furthermore, for any GLP P, we define P° = {r° \ r £ P}. 
Definition 9 

Let P = (Pi, . . . , P n ) be a sequence of GLPs over A. Then, the update sequence 
Q(P) is given by the sequence (Pf, . . . , P° U {->A <- not A \ A E A). 

Notice that the part {->A <— not A \ A G A} serves for making all answer 
sets complete. Moreover, no strong negation occurs in rule bodies of Q{P). Thus, 
application of a rule with -<A in the head can never lead to the application of further 
rules; it can only enable that rules with A in their heads are overridden. As well, 
the rules in {-*A *— not A \ A e A} are not able to override any rule in <2(P). 



On Properties of Update Sequences 



39 



Theorem 14 

Let P = (Pi, . . . ,P n ) be any sequence of GLPs over a set of atoms A, and let 
S C A U nof .4 be a dynamic stable model of P. Then, (5 n A) U -i(.4 \ 5) is an 
answer set of Q(P). 

Proof 

Given a set S C 4 U not .A such that 

S = Cn{{UP\Rejected(S,P))UDefaults{S,P)), 

we have to show that S" = (5 fl A) U -■(.A \ 5) is an answer set of Q(P), i.e., S' is 
a minimal model of 

n 

(( U ^° u ^ A <-notA\AeA})\ Rej(S', Q(P))f '. 

i=l 

Let us suppose this is not the case, i.e., either the set S' is not a model of the 
resulting program, or there is a set S" C S' such that S" is a model too. 
If S' is not a model of 

(( U ^° u ^ A <-notA\AeA})\ Rej(S', Q(P))) , 

i=l 

then there is a rule r £ {{J™ =1 P°U{-u4 <— not A \ A £ A})\Rej(S', Q{P)) such that 
B(r) is satisfied by S' but H(r) £" S'. It follows from the construction of S' that such 
a rule r cannot be of the form ->A <— not A, therefore r £ (U"=i Pi)\R e j(S' > Q(P)) 
must hold. Let us call f the rule in P corresponding to r. First of all, invoking 
Theorem 5, we can observe that 

n 

{f \r £ ( |J P°) \ Rej(S', Q(P)} C {{\jP\Rejected{S, P)) U Defaults(S, P)). 

i=l 

Since the body of r is true in S", we have 5 |= P(r) too, because of the construction 
of 5' and given that P(r) = B(f). Now, if -ff (r) is a positive literal, H(r) S' entails 
H(r) $ S, contradicting the assumption that S is a dynamic stable model of P. If, 
on the other hand, H(r) is a weakly negated atom not A, from the construction of 
S' we can deduct that not A is not in S, contradicting the hypothesis as well. 
Assume now that S" C S' is a model of 

(( U ^° u ^ A ^notA\A£A})\ Rej(S', Q(P))) . 

i=l 

Suppose S" and S' differ on the literal L, i.e., L £ S' but L g S" . But this would 
mean, by construction of S', that a set S C S exists which is also a dynamic stable 
model of P, thus contradicting the hypothesis. Therefore, S' is an answer set of 
((Uli ^° U - not A | A e A}) \ i?ej(S', Q(P))) S '. □ 

Theorem 15 

Let P = (Pi, . . . , P n ) be a sequence of ELPs over A. Suppose S C Lii^ is a dynamic 
answer set of P. Then, S £ U{P). 
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Proof 

Let us denote classical negation in P by ^A, and rewrite S accordingly, i.e., 5" = 
(SnA)U({^A | ^A £ S}). Then, by combining the emulation of classical negation 
in P through rules not A <— ^A and not <-wl <— A ( A £ A) , and the transformation 
Q(-), we obtain by Theorem 14 that the set 

S" = S' U ->({A, ~A \ A e A} \ S') 

is an answer set of P = (Pi, . . . , P n UQ), where each ~A is viewed as a propositional 
atom and Q contains for each atom A G A the following rules: 

~A <— A; 
-iA «- -A; 
-. ~^ <- not ~A; 
->A <- noiA 

Observe that —A G S" implies A £ S' , and A G 5" implies ->A £ S". Furthermore, 
atoms ^A or A are included in S" due to applications of rules r £ Pi, 1,< i < n, 
which are not rejected. 

By induction on i (0 < i < n) one can show that Rej n -i(S" , P 1 ) = Rej n -i(S, P) 
holds. It follows that S is a minimal model of ((DP) \ Rej(S, P)) s , i.e., S is an 
answer set of P. □ 

Theorems 14 and 15 do not hold in the converse direction. This can be seen by 
the following example: 

Example 5 

Consider programs Pi, P 2 , and P 2 , where 

Pi = { it_is_raining <— }; 

P 2 = { not iLis-raining <— not itJs-raining }; 

P 2 = {-<itJs-raining<—notitJs-raining}. 

The sequence P = (Pi,P 2 ) of GLPs has one dynamic stable model, {itJs-raining} , 
but Q(P) has two answer sets, {it-is-raining} and {->it-is-raining} . Likewise, the 
sequence P 1 = (P\,P 2 ) of ELPs has also {itJs_raining} as single dynamic stable 
model, but {itJs_raining} and {^itJs-raining} are answer sets of P . 

Intuitively, the syntactic mechanism responsible for the elimination of some stable 
models in dynamic updates is the renaming of weakly negated literals in the body 
of rules. This renaming ensures that weakly negated literals are not derived in a 
cyclic way, i.e., the truth value of a weakly negated literal has to be supported 
by other information besides the literal itself. This, however, is in general not the 
case with the transformation for update programs based on Definition 2. In the 
next section we present conditions under which both approaches yield equivalent 
results. As well, we illustrate that the approach of Alferes et al. (1998; 2000) does 
not eliminate all kinds of cyclic informations. 
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7.3.3 Equivalence of Dynamic Stable Models and Update Answer Sets 

In the sequel, we use AND/OR-graphs to identify classes of logic programs for which 
update answer sets and dynamic stable models coincide. Moreover, we present a 
graph condition which holds precisely in case an update answer set does not cor- 
respond to a dynamic stable model. AND/OR-graphs arc frequently employed to 
model problem reductions, and belong to the category of hypergraphs, i.e., graphs 
where nodes are connected by hypernodes (also called connectors), represented as 
a tuple of nodes. Formally, an AND/OR-graph is a pair G = (N,C), where N is 
a finite set of AND-nodes or OR-nodes, and C C N x lji=o is a set of con- 
nectors such that C is a function, i.e., for each I G N there is at most one tuple 
(Oi,...,O k ) G U'=o N * such that (I,Oi,...,O k ) G C. We call I the input node 
and Oi, ... ,Ok the output nodes of (I, 0\, . . . , Ok) G C. As well, (I, 0\, . . . , Ok) 
itself is referred to as a k- connector. 

The concept of a path, as defined in ordinary graphs, can be generalized to 
AND/OR-graphs as follows. Let (R, 0\, . . . , Ok), k > 0, be the connector for a 
node R in G. A tree p is a path rooted at R in G if the following conditions hold: 

(i) if k = 0, thcnp= (R); 

(ii) if k > and R is an AND-node, then p = (R,pi, . . . ,Pk), where pi, . . . ,pk arc 
paths rooted at 0\, . . . , Ok in G; and 

(iii) if k > and R is an OR-node, then p = (R,pi), for some 1 < i < k, where pi 
is a path rooted at Oi in G. 

Note that p might be an infinite tree. Furthermore, the graph associated with 
a path p, G(p), is the directed graph whose nodes are the nodes of G occurring 
in p and whose edges contain, for every node R in the recursive definition of p, 
R — > Oi, . . . , R — ► Ok if R is an AND-node, and R — > Oi if R is an OR-node. 

Next, we will define how an AND/OR-graph can be assigned to an update se- 
quence P = (Pi, . . . ,P n ), and how such a graph can be reduced with respect to a 
set of literals S. 

Definition 10 

Let P = (Pi, . . . ,P n ) be a sequence of GLPs over A. We associate with P an 
AND/OR-graph, G P = (N, C), in the following way: 

(i) the set N consists of AND-nodes r for every rule r in P, and OR-nodes Z for 
every Z G H(r') U B(r') and every r' in P; 

(ii) the set C consists of (k + Z)-connectors (r, A[, . . . , A' k , not A[, . . . , not A[) for 
every rule r in P of the form H(r) <— Ai, . . . , A k , not A[, . . . , not A[, k, I > 0, 
and of m-connectors (Z, n, . . . , , r m ) for all rules n, . . . , , r m in P such that 
H (r-j) = Z, where Z e All not A. 

Definition 11 

Let P = (Pi, . . . , P n ) be a sequence of GLPs over A and let S C A U not A be a 
generalized interpretation. The reduced AND/OR-graph o/P with respect to S, Gp, 
is the graph resulting from Gp by: 
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(1) removing all AND-nodes r and their connectors (as well as removing r from 
all connectors containing it as output node), if cither r £ Rejected(S, P) or 
S^B(r) holds; and 

(2) replacing, for every atom A, the connector of not A by the 0-connector (not A) , 
if A is associated with a 0-connector after Step (1) and no r £ Rejected(S, P) 
exists such that H(r) = A. 

Using the definitions above, we are able to state a simple graph condition ex- 
pressing correspondence between update answer sets and dynamic stable models. 

Theorem 16 

Let P = (Pi, . . . , P n ) be a sequence of GLPs over A and let S C Lit a be an answer 
set of Q(P). Then, the corresponding generalized interpretation S' = {A \ A £ 
S} U {not A | ^A £ S} is a dynamic stable model of P iff, for every atom A £ A\S, 
one of the following conditions holds: 

(i) For every rule r in P such that H(r) = A, S' ^ B(r). 

(ii) There exists a path p in Gp , rooted at not A, such that G(p) is acyclic. 

Proof 

See (Eiter et al, 2000b). □ 

The next theorem addresses the case of ELPs. 
Theorem 17 

Let P = (Pi, . . . , P n ) be a sequence of ELPs over A and let S C Lit a be an answer 
set of P. Furthermore, let P = (Pi, P n U {not A <- ->A, not ->A <- A \ A £ A}) 
and S' — S U {not L \ L £ Lit a \ S}. Then, S is a dynamic answer set of P iff, for 
every literal L £ Lit a \ S, one of the following conditions holds: 

(i) For every rule r in P such that H(r) — L, S' ft= B(r). 

(ii) There exists a path p in Gp, rooted at notL, such that G(p) is acyclic. 

Proof 

See (Eiter et al, 2000b). □ 

Theorem 16 and Theorem 17 allow us to identify classes of update programs for 
which update answer sets and dynamic stable models coincide. If, for example, a 
cyclic path rooted at not A depends on A, then a reduction of the graph with respect 
to an answer set will break it open since an answer set either contains A, or not. 
Also, if the graph associated with an update sequence does not contain any cyclic 
paths rooted at weakly negated literals, then the second condition of Theorem 16 
is always fulfilled. 

Corollary 1 

Let P = (Pi, . . . ,P n ) be a sequence of GLPs over A. If every cyclic path rooted 
at not A in Gp also contains node A, then there is a one-to-one correspondence 
between answer sets of Q(P) and dynamic stable models of P. In particular, this 
holds if Gp does not contain any cyclic path rooted at a not A node. 
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This corollary can further be specialized to a condition which can be checked 
efficiently (namely in 0(\A\ ■ \\P\\) time, where ||P|| denotes the size of P). 

Corollary 2 

Let P = (Pi, . . . ,P n ) be a sequence of GLPs over A and let Q = (J G(p) be the 
union of the graphs for all paths p in Gp. Suppose that, for every node not A in Q, it 
holds that every cycle containing not A also contains A. Then, there is a one-to-one 
correspondence between answer sets of <2(P) and dynamic stable models of P. 

Example 6 

Consider the following sequence P = (Pi,P2,p3) of GLPs, taken from (Alfcrcs 
et al, 1998): 

Pi = { n : sleeps- not tv-on, r 2 : tv-on <— , r 3 : watch-tv <— tiLon }; 
P2 = { r 4 : not tv_on <— power-failure, r 5 : power-failure <— } ; 
P 3 = { r 6 : not power-failure <— } . 

There are only two not A nodes in Q with outgoing edges, namely not tv-on and 
not power-failure. Both are connected with a single rule node: the former with r±, 
and the latter with r 6 , which is a terminal node. Node r± has a single edge leading 
to power-failure, which is in turn connected with a single rule node, namely r 5 , a 
terminal node. Thus, there does not exist a cycle in Q containing not A. Hence, 
update answer sets of Q(P) and dynamic stable models of P coincide (modulo the 
different language). In fact, P has the single dynamic stable model 

{notpower-failure, tv-on, watch-tv, notsleep}, 

which corresponds to the single update answer set of Q{P), given by: 

{-ipower-failure, tv-on, watch-tv, ->sleep}. 

Having dealt with aspects of equivalence between dynamic stable models and up- 
date answer sets, let us now discuss their differences. Recalling the update sequence 
P = (Pi,P 2 ) and P = (PijPg) from Example 5, the single dynamic stable model 
{it-is-raining} of P seems, in the sense of inertia, more intuitive than the answer 
set {-iit-is-raining} of P = Q(P) because the tautological update information 

P3 = {not it-is-raining <— not it-is -raining] 

is quite irrelevant to the fact that it is raining, as given by 

Pi = {it-is -raining . 

So, in some sense, the semantics of Alfcrcs et al. (1998; 2000) eliminates unintended 
stable models, as it does not allow for cyclic derivations of negative information. 
However, the rewritten rule of 

P2 = {— 'it-is -raining <— not it-is-raining} 

differs in that it allows to conclude that it is not raining given that there is no 
information whether it is raining. In this sense, both answer sets {it-is-raining} 



44 



T. Eiter et al. 



and {-litJs-raining} are, in principle, reasonable. Observing that the more intuitive 
answer set of P is minimal while the other is not, one can use the notion of 
minimality to filter out the unintended answer set. But, in general, there exist 
dynamic stable models such that the corresponding answer sets are not minimal 
(or strictly minimal) and vice versa. Also, acyclic derivations of negative information 
do not always capture the intuition of inertia as shown by the following example: 

Example. 7 

Let us consider a slight modification of Example 5, where the knowledge base 

P = { itJs-raining <— , it_is-doudy <— it_is_raining } 

is updated by the information 

U = {not itJ,sjraining <— not it_is_cloudy}, 

which, by the same intuition of inertia, is also irrelevant to the fact that it is now 
actually raining and thus cloudy. However, this yields two dynamic stable models 

S[ = {itJs-raining, itJs-doudy}; 

S' 2 = {not itJs _raining, not it_is_cloudy}, 

corresponding to the answer sets 

5*1 = S[; 

S'2 = {^iLis-raining, -litJs-doudy} 

of the rewritten ELP 7 , showing that also the mechanisms enacted in DynLP do not 
completely avoid cyclic derivations. 

Despite their differences, the general properties of program updates, as investi- 
gated in Section 4, hold for dynamic logic programs also. By virtue of Theorem 17 
and Corollary 2, one can easily verify that every counterexample for an invalid 
property belongs to a class where update answer sets and dynamic stable models 
coincide. As well, arguments similar to those used for the demonstrations of the 
valid properties of Section 4 can be found in order to show that these properties 
also hold for dynamic logic programs. 

7-4 Program Updates Through Abduction 

The use of abduction for solving update problems in logic programming and data- 
bases goes back to (Kakas & Mancarella, 1990). Taking advantage of their frame- 
work of extended abduction (Inoue & Sakama, 1995), Inoue and Sakama (1999) 
integrated three different types of updates into a single framework, namely view 
update, theory update, and inconsistency removal. In particular, view update deals 
with the problem of changing extensional facts (which do not occur in the heads of 

7 Similar to Example 5, here, the intuitively preferred answer set is also a minimal answer set, 
while the other is not. 
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rules), whilst theory update covers the general case in which (a set of) rules should 
be incorporated into a knowledge base. We discuss the latter problem here. 

Informally, for ELPs Pi and P 2 , an update of Pi by P2 is a largest program 
P' such that Pi C P' C Pi U P 2 holds and where P' is consistent (i.e., P 1 has a 
consistent answer set). This intuition is formally captured by reducing the problem 
of updating Pi with P 2 to computing a minimal set of abducible rules Q C Pj \ P 2 
such that (Pi UP2) \Q is consistent. In technical terms of (Inouc & Sakama, 1995), 
the program Pi U P2 is considered for abduction where the rules in Pi \ P 2 arc 
abducible, and the intended update is realized via a minimal anti- explanation for 
falsity, which removes abducible rules to restore consistency. 

While this looks similar to our minimal updates, there is, however, a salient 
difference: abductive update does not respect causal rejection. That is, a rule r 
from Pi \ P 2 may be rejected even if no rule r' in P 2 fires whose head contradicts 
the application of r. For example, consider Pi = {q <— , <— a} and P 2 = {a <— }. 
Both Pi and P 2 have consistent answer sets, but (Pi, P 2 ) has no (consistent) answer 
set because no rule in Pi is rejected and thus both rules must fire. On the other 
hand, in Inoue and Sakama's approach, one of the two rules in Pi will be removed. 
Furthermore, inconsistency removal in a program P occurs in this framework as 
special case of updating (take, e.g., Pi = P and P 2 = 0). 

From a computational point of view, abductive updates are — due to inherent 
minimality criteria — harder than update programs; in particular, some abductive 
reasoning problems are shown to be S^-complcte (Inoue & Sakama, 1999). 

7.5 Updates Through Priorities 

Zhang and Foo (1998) described an approach for updating logic programs based 
on their preference-handling framework for logic programs introduced in (Zhang 
& Foo, 1997). The general approach is rather involved and proceeds in two stages, 
roughly described as follows. For updating Pi with P 2 , in the first stage, each answer 
set S of Pi is updated to a "closest" answer set S' of P 2 , where distance is measured 
in terms of the set of atoms for which S and 5" have different truth values, and 
closeness is set inclusion. Then, a maximal set of rules Q C Pi is chosen in such a 
way that P3 = P 2 U Q has an answer set containing S'. In the second stage, P3 is 
viewed as a prioritized logic program in which rules from P 2 have higher priority 
than rules from Q, and its answer sets are computed. The resulting answer sets are 
identified as the answer sets of the update of Pi with P 2 . 

This approach is apparently different from our update framework. In fact, it is 
in the spirit of Winslett's (1988) possible models approach, where the models of a 
propositional theory are updated separately and which satisfies update postulate 
(U8). More specifically, the two stages in Zhang and Foo's approach respectively 
aim at removing contradictory rules from Pi and resolving conflicts between the 
remaining rules of P 2 . However, like in Inoue and Sakama's approach, rules are not 
removed on the basis of causal rejection. In particular, on the example considered 
in (Zhang & Foo, 1998), both approaches yield the same result. The second stage 
of the procedure indicates a strong update flavor of the approach, since rules are 
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unnecessarily abandoned. For example, the update of P\ — {p <— not q} with 
Pi = {<? <— notp} results in P 2 , even though Pi UP2 is consistent. Since, in general, 
the result of an update is given by a set of programs, naive handling of sequences 
of updates consumes exponential space in general. 

7.6 Compiled Preferences 

Since the underlying conflict-resolution strategy of many update formalisms, in- 
cluding the current one, is to associate, in some sense, "higher preference" to new 
pieces of information, as final installment of our discussion on related work, we 
briefly review the approach of Dclgrandc et al. (2000) to preference handling in 
logic programming, which is also based on a transformational principle. 

To begin with, Delgrande et al. (2000) define an ordered logic program as an ELP 
in which rules are named by unique terms and in which preferences among rules 
are given by a new set of atoms of the form s -< t, where s and t are names. Thus, 
preferences among rules are encoded at the object-level. An ordered logic program 
is transformed into a second, regular ELP wherein the preferences are respected, 
in the sense that the answer sets obtained in the transformed theory correspond to 
the preferred answer sets of the original theory. The approach is sufficiently general 
to allow the specification of preferences among preferences, preferences holding in 
a particular context, and preferences holding by default. 

The encoding of ordered logic programs into standard ELPs is realized by means 
of dedicated atoms, which control the applicability of rules with respect to the 
intended order. More specifically, if rule r has preference over rule r' , the control 
elements ensure that r is considered before r', in the sense that, for a given answer 
set S, rule r is known to be applied or defeated ahead of r' . 

This control mechanism is more strict than the rejection principle realized in Def- 
inition 2. For instance, in the preference approach, it may happen that no answer set 
exists because the applicability of a higher-ranked rule depends on the applicability 
of a lower-ranked rule, effectively resulting in a circular situation which cannot be 
resolved in a consistent manner. On the other hand, this is not necessarily the case 
in the current update framework, where newer rules may only be applicable given 
older pieces of information. So, in order to simulate updates within the framework 
of (Delgrande et al., 2000), under the proviso that newer information has prefer- 
ence over older information, it is necessary to relax the conditions which enable 
successive rule applications. 

8 Conclusion 

In this paper, we considered a formalization of an approach to sequences of logic 
program updates based on a causal rejection principle for rules, which is inherent 
to other approaches as well. We provided, in the spirit of dynamic logic program- 
ming (Alferes et al., 1998; Alferes et al., 2000), a definition of the semantics of 
sequences P of ELPs in terms of a simple transformation to update programs, P < , 
which are ordinary ELPs, and described a declarative semantical characterization 
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as well. Then, as a main novel contribution, we investigated the properties of this 
approach and of similar ones from the perspective of belief revision and nonmono- 
tonic reasoning, based on the given characterization. For this purpose, we considered 
different possibilities of interpreting update programs as theory change operators 
and abstract nonmonotonic consequence operators, respectively. Our main findings 
on this aspect were that many of the postulates and principles from these areas 
are not satisfied by update programs. We then have introduced further properties, 
including an iterativity property, and evaluated them on update programs. 

Motivated by an apparent lack of minimality of change, we then considered re- 
finements of the semantics in terms of minimal and strictly minimal answer sets, 
and discussed their complexity and implementation. Furthermore, we compared 
the current proposal to other related approaches, and found that it is semantically 
equivalent to a fragment of inheritance logic programs as defined by Buccafurri 
et al. (1999a). Moreover, our approach coincides on certain classes with dynamic 
logic programming, which has been introduced by Alferes et al. (1998; 2000). For 
the latter correspondence results, we provided exact characterizations in terms of 
graph-theoretical conditions. In view of these results, our discussion on general prin- 
ciples of update sequences based on causal rejection applies for these formalisms as 
well. 

Several issues remain for further work. An interesting point concerns the formu- 
lation of postulates for update operators on logic programs and, more generally, on 
nonmonotonic theories. As we have seen, several postulates from the area of logical 
theory change fail for update programs (cf. (Brewka, 2000) for related observations 
on this topic) . This may partly be explained by the nonmonotonicity of answer sets 
semantics, and by the dominant role of syntax for update embodied by causal re- 
jection of rules. However, similar features are not exceptional in the context of logic 
programming. Therefore, it would be interesting to consider further postulates and 
desiderata for updating logic programs besides the ones we analyzed here, as well 
as an AGM style characterization of update operators compliant with them. This 
issue seems to be rather demanding, though, and we might speculate — without fur- 
ther evidence — that it will be difficult to find a general acceptable set of postulates 
which go beyond "obvious" properties. 

A natural issue for update logic programs is the inverse of addition, i.e., re- 
traction of rules from a logic program. Dynamic logic programming evolved into 
LUPS (Alferes et al, 2000), which is a language for specifying update behavior in 
terms of conditional addition and retraction of sets of rules to a logic program. 
LUPS is generic, however, as in principle different approaches to updating logic 
programs could provide the underlying semantical basis for the single update steps. 
Exploring properties of the general framework, as well as of particular instanti- 
ations, and reasoning about update programs describing the behavior of agents 
programmed in LUPS or in other similar languages is topic of ongoing research. 

Finally, building real-life applications, like intelligent information agents whose 
rational component is modeled by a knowledge base, which is in turn maintained 
using update logic programs, is an interesting issue for further research. The in- 
tegration of reasoning components into agent architectures amenable to logic pro- 
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gramming methods, such as the one of the IMPACT agent platform (Subrahmanian 
et al., 2000), is an important next step in order to make the techniques available 
to agent developers. This is also part of our current research. 
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A Proofs 

A.l Proof of Theorem 2 

For any set U C Lit a*, define Uq = U n Lit a, and, for 1 < i < n, let Ui — 
{L t Li G U} and U™ j = {rej(r) | rej(r) G U,r G P,}. Clearly, it holds that 

u = u u[j r l =1 (u i uur). 

Consider the answer sets S, T of P < and assume that S n Lit a = T n Lit a- We 
show by induction on j (0 < j < n — 1) that S n -j = T n _j and S™ij — T^-j- From 
this, and given the relation 5*0 = T (by the assumption S fl Lit a = T n LitX), it 
follows that S = T. 

Induction Base. Assume j = 0. First of all, it is quite obvious that S™ j = T„ ej = 
0. Consider now some L n G Lit a* . According to the construction of the transforma- 
tion P<], the literal L n can only be derived by some rule L n <— B(r), not rej(r) G 
P<3, where r E P n . Since S™ j = = 0, it follows that L n <- B+(r) must be a 
member of both P^ and P^. Since B + (r) C Lii^ and So = To, we have B + (r) C 5 
iff B+(r) C T. Thus, L„ G S n iff T„ G T„. This implies S n = T„. 

Induction Step. Assume n — 1 > j > 0, and let the assertions S n -k = T„_ fe 
and S™0_u = Tjy, hold for all k < j. We show that they hold for k = j as well. 
Consider some atom rej(r) where r G Pn-j- Given the transformation P^, the atom 
rej(r) can only be derived by means of rule rej(r) <— £>(r), -T n _j + i G P<. Since 
B~(r) C and 5 = T , it holds that B"(r)nS = B~(r)nT. Hence, rej(r) <- 
B + (r), ->L„_j_|_i is in P^ iff it is in P^. By induction hypothesis, ->L„_j_|_i G 5 iff 
-iL n _j + i G T. Since we also have that B + (r) C S iff B + (r) C T, it follows that 
rej(r) G S iff rej(r) G T, and so S^. = T„ r «.. 

Consider now some literal T n _j G Lit.4. . This literal can only be derived by 
means of rule L n _j <— L n _j + i, or by a rule of the form L n _j <— B(r), not rej(r), 
for some r G P n -j- If L n -j is derived by T n -j <— L n _j + \, it follows immediately 
from the induction hypothesis that L n _j G S iff T„_j G T. So assume now that the 
second case applies. Since we already know that • = T^ • , and since B" (r) PiS = 
S"(r)nT, we have that T n -j B + {r) lies in P^ iff it lies in P^. Again using the 
property that B+(r) C 5 iff P+(r) C T, we obtain that T n _ j G 5 iff L„_j G T. 
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Combining the two cases, and since the literal L n was arbitrarily chosen, it follows 
that S n —j = T n —j. 



A. 2 Proof of Theorem 4 

Only-if part. Suppose S is an answer set of P = (Pi, . . . ,P n ). We show that S 
is a minimal model of (UP \ Rej(S, P)) s . First, we show that S is a model of 
{UP\Rej(S, P) f. 

Let S be the uniquely determined answer set of P< such that S = S n Lit a- 
Consider some r + G (UP\ Rej(S, P)) s . We first assume that r is a constraint. So, 
r G P<. Since B"(r) n S = 0, B"(r) C Lit A , and 5 C 5, we have B~(r) n 5 = 0. 
Hence, _B + (r) $Z S\ since 5* is an answer set of P< and r + G (P^) 5 . It follows that 
r+ is true in S. Let us now consider the case when r is not a constraint. Then, 
there is some i, 1 < i < n, such that r G Pi and r ^ Rej(S, P). We must show 
that -ff (r) G S 1 whenever B + (r) C 5. By construction of the update program P <7 
r induces some rule Li <— B(r), not rej(r) € P<, where L = H(r). We claim that 
L, <— B(r),not rej(r) is not defeated by 5. First of all, since B~(r) (~l 5 = 0, it 
follows that B~{r) (~l 5 = 0, as argued above. Furthermore, since r Rej(S,P), 
Lemma 1 implies rej(r) £ S. This proves the claim. Thus, <— B + (r) E (P<) s • 
Consequently, assuming B + (r) C 5, it holds that Lj G S*, since S* is an answer set 
of P< and S C S. Moreover, since (P<) s contains the inertia rules Li <— L i+ i 
(1 < i < n) and L <— Li, it follows that L e S. By observing that L e iit^, 
L <E S follows, which implies that r + is true in S. This concludes the proof that S 
is a model of (UP\ Rej(S, P)) s . It remains to show that S is a minimal model of 
(UP\Rej(S,P)) s . 

Assume that So C S is a model of (UP\ Rej(S, P)) s . Consider the set 

5 - 5\({L | £ G 5\5 }U{i, | L G S*\S* ,1 < i < n}). 

It is easy to show that So is a model of (P^) 5 . Moreover, 5o C S*. We arrive at a 
contradiction, because S is assumed to be an answer set of P<j . As a consequence, 
S must be a minimal model of (UP\ Rej(S, P)) s ■ This concludes the proof that S 
is a minimal model of (UP\ Rej(S, P)) whenever S 1 is an answer set of P. 

If part. Assume that S is a minimal model of (UP\ Rej(S, P)) s . Define S C Lit^. 
as follows: 

5 = SU {rej(r) | r G Rej(S,P)} U 

n 

U{£j I 1 < j < i, 3r G P t \ Rej(S, P) such that H{r) = L and S \= B(r)}. 

i=l 

We show that S 1 is an answer set of P< . Since S (~l Lii^ = S 1 , this will imply that S 
is an answer set of P. 

We first show that S is a model of (P^) 5 . Consider some r + G (P^) 8 . Depending 
on the construction of P<| , there are several cases to distinguish. 

(i) r is a constraint. Then, B + (r) % S. Otherwise, we would have B + (r) C S and 
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r+ G (UP\Rej(S,P)) s (since S C S, B+{r) C Li^, andB-(r)n5 = 0), violating 
the condition that S is a model of (UP\ Rej(S, P)) s . Thus, r + is true in S. 

(ii) r is a rule of form Li <— B(r'), not rej(r'), where L — H(r'). Since r + G 
(P^) 5 , r + is not defeated by S and rej(r') $ S. According to the definition of 
S, the latter condition implies that r' £ Rej(S, P). Since H{r) = Li, it holds that 
r' G Pi, so r> G Pi\Rej(S, P). Assume B+(r') C 5. Since 5 C S* and B+(r') C Lzt^, 
we get _B+(r') C 5. Moreover, since r is not defeated by S, the definition of S implies 
that Li G S. This shows that r+ is true in S. 

(hi) r is a rule of form rej(r') <— B(r'), ->Lj+i, where r' £ Pi and i = H(r'). 
Assume B + {r) C S*. Hence, ->Li+\ £ 5. By dehnition of 5, this implies that there 
is some rule r" G Pj\Rej(S, P),i + 1< j < n, such that H(r") = ->L, B+(r") C 5, 
and r" is not defeated by S 1 . Since Rejj(S, P) C Rej(S, P), it follows immediately 
that r' G Reji(S,P) C Rej(S,P), which in turn implies rej(r') e S*, by definition 
of 5 1 , proving that r + is true in S*. 

(iv) r is a rule of form <— -Lj+i (1 < i < n). Then r is trivially true in S, by 
construction of S. 

(v) r is a rule of form L <— L\. If L\ G S, then there is some r' G Pi \ Rej(S, P) 
such that H(r') = L, B + (r') C S, and r' is not defeated by 5. Since 5 is a model 
of (UP \ Rej(S, P)) s , it follows that L G 5 C S. Thus, r is true in S. 

This concludes the proof that S is a model of (P<i) s ■ We proceed by showing that 
S is a minimal model of (P<i) s ■ Suppose So is a model of (P<) s such that So C 5. 
We show that this implies 5 C S , a contradiction. Hence, S must be minimal. 

Let us first assume that 5*0 fl Litj, C S fl i.e., is smaller on the literals 

in Lii^. Then, for some L G Lit^, no rule r+ G with P(r) = fires in So, i.e., 
S+(r) % So- Hence, by definition of S and P|, there is no r' G (UP\ Rej(S, P)) s 
such that H(r') = L and P + (r') C S. Consequently, S \ {L} satisfies all rules in 
(UP\ Rej(S, P)) s . This, however, contradicts the fact that S is a minimal model 
of (UP \ Rej(S, P)) s . It follows that S n Lit A = S n Lii^ holds. 

Now consider any G S 1 . Then, there is a rule r G Pj \ Rej(S, P), i < j < n, 
such that P + (r) C 5 and r is not defeated by S. According to the definition 
of P<, and by Lemma 1, rule r introduces a rule Aj <— B + (r) G (P<]) s . Since 
B+(r) CS = Sfl Lit A and S n lii^t = 5 n Lit^, it follows that Aj G S , by the 
assumption that So is a model of (P^) 5 . Moreover, since i < j, the inertia rules 
L fe <- L k+1 G (P<) s (1 < k < n) imply G S . 

Finally, consider rej(r) G S, where r e By the definitions of Rej(S,P) and 
5, it follows that B+(r) C S, B _ (r) 5 = 0, and ->L i+ i G 5. From the above 
considerations, G S implies -iLj+i G So- Moreover, B~(r) fl 5 = 0. So, 

rej(r) <— P + (r),-iL i+ i G P^. Since 5o is a model of (Po) 5 , and given the fact 
that So (~1 -Litx = 5, we obtain rej(r) G 5o- This concludes the proof that S C So- 

A. 3 Proofs of the Revision and Update Postulates 

In what follows, we assume that P is a nonempty sequence (Pi, . . . , P n ) of ELPs. 
(Kl) (P, P) represents a belief set. 
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This holds by convention. 

(K2) & (Ul) P C Bel((P,P)). 

This is clearly satisfied, as the rules of P cannot be rejected in the updated program. 
(U2) Bel{P) C Bel(P) implies Bel({P,P)) = Bel(P). 

This postulate states that no change occurs if the update is already entailed. This 
means that inconsistency is preserved under updates and contradictions cannot be 
removed by updates. This is clearly not the case : Updating P = {a <— , -*z ^} with 
P = {a ^} removes inconsistency. Also for a consistent P, update by a logically 
implied rule may lead to a change in semantics. Consider, e.g., P = {a <— not b} and 
P = {b <— not a}. Then P has the unique answer set S = {a}, and S \= b <— not a. 
However, (P,P) has, besides S, another answer set S' = {b}. 

(K3) Bel((P, P)) C Bel(Bel(P) U P). 

This property fails in general, if programs have infinite alphabets. This can be seen 
by the following example. Let P — Pi and P = P 2 , where 

Pi — {a,i <— not bi, bi <— not di, c<— cii \ i > 1} U { <— not c}; 

P2 = { <- &i I * > 1}. 

It is easy to see that every answer set S of Pi must contain c, and that either a, 
or bi (but not both) are contained in S. Therefore, c e Bel(P) holds. Furthermore, 
S' = {ai I i > 1} U {c} is an answer set of Bel(P). Since S' \= P2, it follows that 
S' is an answer set of Bel(P) U P. This implies Bel(Bel(P) UP)c SeZ({^}), i.e., 
Bel(Bel{P) U P) does not contain all possible rules. 

On the other hand, Bel((P, P)) = Pe/({^}): Since negation does not occur in 
ride heads of Pi and P 2 , we have Rej(S, (P, P)) = 0, and thus U((P, P)) = S(Pi U 
P2) holds. However, Pi UP2 clearly has no answer set, which implies Bel((P, P)) = 
Bel(Pi U P 2 ) = Bel({<-}). It follows that Bel((P,P)) £ Bel(Bel(P) U P), which 
proves our claim. 

That property (K3) holds if either P or P has a finite alphabet follows from (K7), 
which subsumes (K3) by choosing P = in (K7), and by virtue of Bel{{P,%)) = 
Bel(P). 

(U3) If both P and P are satisfiable, then (P, P) is satisfiable. 
This is clearly violated. Consider, e.g., P = Pi and P = P 2 , where 

Pi = {a <— 6, noi a}; 

P 2 = {6- }. 

(K4) If Pd(P) U P has an answer set, then Bel(Bel(P) U P) C Pe/((P, P)). 

The property is violated. Consider Pi = {a <— , 6 <— ko£ c, c <— noi 6} and P 2 = 
{->a <— 6}. As easily seen, the sequence (Pi,P 2 ) has two answer sets, S = {b, ->a} 
and S" = {a, c}. On the other hand, since Pi C Bel(Pi), S cannot be an answer set 
of Bel(Pi) U P 2 ; in fact, S' is its unique answer set. Since, e.g., S' \= c <— nota,b 
whilst 5 ^ c <- nof a, 6, it follows that Bel{Bel{P{) U P 2 ) % Bel((P u P 2 )). 
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(K5) (P, P) is unsatisfiable iff P is unsatisfiable. 

This is violated, since contradictory rules in P are not affected unless they are 
rejected by rules in P. For instance, if P consists of the single 1 program {« <— . 
->o <— }, then the update of P by P = {6 <— } does not have an answer set. 

(K6) & (U4) P = P and P = P' implies (P, P) = (P, P'). 

This expresses irrelevance of syntax which is clearly not satisfied, since rejection of 
rules depends on their syntactical form. For instances, take P = P = P\, P = P 2 , 
and P' = P2, where 

Pi = {a^ ,b^- }; 
P 2 = {^a^b}; 
P2 = {^b^a}. 

Then clearly P = P and P2 = P2, but the resulting updates have different answer 
sets: {-ia, 6} is an answer set of (Pi, P2) but not of (Pi, P2). 

(K7) & (U5) Bel({P,PUP')) C Bel(Bel((P, P)) U P'). 

The property does not hold if both P and P' (or P and P') have infinite alphabets, 
which follows from the example showing the failure of (K3) (set P — 0, and exploit 
the relation Be/((P,0)) = Bel(P)). 

Property (K7) holds if (UP)UP or P' has a finite alphabet. Towards a contradic- 
tion, suppose it fails. Then, there exists r e BeZ((P, PUP'))\Bel(Bel((P, P))UP'), 
and hence an answer set S £ S(Bel((P, P)) UP') such that S y= r. 

Consider P = (P, P), and let .A' denote the atoms in P. Then, for every finite set 
of atoms Ao C A 1 , there must exist some answer set Sa of P such that S and 
coincide with respect to Aq. Indeed, Bel(P') must contain, for each interpretation 
M which does not coincide with any answer set of P with respect to Aa, the 
constraint <— L\, . . . , L m , not L m+ i, . . . , ko£ L„, where {Li, . . . , L m } = Litj[ n M 
and {i m+ i, . . . , L„} = Lit^ \ M, respectively. Furthermore, all answer sets of 
Bel(P) U P' must coincide on the atoms in „4\ A'. Thus, assuming that either P 
or P' has a finite alphabet, it follows that S is an answer set of P or P'. Without 
loss of generality, we assume that S is an answer set of P. 

Hence, Theorem 4 implies that S is a minimal model of ((UP) \ i?ej(5, P)) s . 
Since 5 |= P', we conclude that S* is also a minimal model of (((UP') U P') \ 
Rej(S, P)) s . Furthermore, for the update sequence P" = (P, P U P'), it holds that 
Rej(S, P") = RejiP 1 ). Indeed, S \= r> for all r'eFU P', thus r' ^ Rej(S, P) and 
r ^ Rej(S, P"). Equivalence for the rules in P can be shown by induction on the 
length of P. Hence, we obtain that S is a minimal model of ((UP') \ Rej(S, P")) s . 
From Theorem 4, we obtain that S is an answer set of P" . Since S \/= r, it follows 
r g Bel(P, PUP'), a contradiction. 

(U6) Given Bel(P') C Bel{{P,P)) and BeZ(P) C Bel((P,P')), then 
Bel((P,P)) = Bel((P,P')). 
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This postulate fails. Consider, e.g., P — Pi, P — P2, and P' = P 3 , where 

Pi = {b^,d^}; 

P2 = { ->a <— , ->e <— d, -<d <— e }; 

P 3 = {^a^ ,^c^b,^b^b}. 

Then, {->a, b, d, ->e} is the unique answer set of (Pi,P2), and {^a, b, d, ->c} is the 
unique answer set of (Pi,P 3 ). Moreover, it is easily verified that ->a e 5 fl 5', for 
any answer set S of P2 and any answer set S' of P3. Hence, Bel{P$) C Bel((Pi, P2)) 
and flef(P 2 ) C Bel({P u P 3 )). However, Bel{{P l ,P 2 )) ? Bel((P u P 3 )). 

(K8) If Bel((P, P)) U P' is satisfiable, then 

Bel(Bel(P, P) U P') C BeZ((P, P U P')). 

This postulate fails. Setting P = 0, the property reduces to (K4) since BeliP, 0) = 
Bel(P). The failure follows from the failure of (K4). 

A. ^ Proofs of the Postulates for Iterated Revision 
(CI) If P' C Bel(P), then Bel{{P,P',P)) = Bel((P,P)). 

Adding rules which arc implied after the previous update does not change the 
epistemic state. This is not satisfied: take, e.g., P — 0, P = {b <— not a}, and 
P' = {a <— not 6}. Then (P, P',P) has two answer sets, while (P,P) has a single 
answer set. The associated belief sets are thus different. 

(C2) If S ^ P', for all 5 £ <S(P), then Bel((P, P, P')) = Bel((P, P')). 

This property is not satisfied. For a counterexample, consider Pi = {a <— b}, 
P2 = <— }, and P3 = {-16 <— not a}. Then (Pi, P2, P3) has two answer sets, {a, 6} 
and {"'o}, whilst (Pi,p3) possesses the single answer set {"'o}. 

(C3) If P' C Bel((P,P)), then P' C Bel((P, P 1 , P)). 

Implied rules can be added before the update. This property fails in general. For 
example, let P— Pi, P = P 2 , and P' = P 3 , where 

Pi - 0; 

P2 = { a <— notb, b <— not a, g <— a, g <— notg, c <— }; 
P3 = { g <— , ->c <— not a }. 

Note that P2 has a single answer set, 5 = {a, 5, c}, and clearly 5 |= P3. However, 
(Pi, P3, P2) has among its answer sets 5" = {0, g, c}, and S' y= ->c <— not a. 

The property holds, however, providing P' contains a single rule. Suppose P' C 
Be/((P, P)) but r ^ Be/((P, P', P)), for P' = {r}. Then, r G i?ej(5, (P, P', P)) for 
some answer set S of (P, P',P). This means, however, that S is an answer set of 
(P, P) (as r cannot reject any rule in P). Thus, r £ Bel((P, Pj). 

(C4) If S |= P' for some 5 £ U((P, P)), then S |= P' for some 5 G W((P, P', P)). 
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This property holds. By hypothesis, there exists some S G U((P,P)) such that 
S \= P' . By Theorem 4, S is a minimal model of 

(((UP)UP)\Rej(S,(P,P))) S . 

Since S \= P' and 5 |= P (due to 5 G W((P, P))), no rule r' £ P' can be rejected 
by a rule r of P. Also, r' can reject a rule r" in P only if r" is rejected within P. 
Thus, flej(S, (P, P)) = i?ej(5, (P, P', P)), and 5 is a minimal model of 

(((UP) U P' U P) \ Rej(S, (P,P, P))) 5 . 

This means, by Theorem 4, that 5 is an answer set of (P, P', P). 

(C5) If S ^ p for all S G «((P, P)) and P g Bef((P, P')), then 
P£Bel((P,P,P>)). 

This property fails: just consider P = 0, P = {a ^ }, and P' = {fe <— }. 

(C6) If S ^ P' for all S G H((P, P)) and S ^ P for all S G W((P, P')), then 
S^Pfor all S eU({P,P,P')). 

This property fails as well, which can be seen by the counterexample for (C5), 
setting P = 0. Another counterexample for (C6) — which does not exploit minimiza- 
tion of answer sets — is P = {->b <— , ->a <— b}, P = {a <— }, and P' = {b <— }. 

(11) Bel(P) is a consistent belief set. 
This is clearly violated in general. 

(12) P C Bel((P,P)). 

The postulate is easily seen to be satisfied (cf. (K2) and (Ul)). 

(13) If L «- G Bel((P, {Li <-,..., L fc <- })), then 
L <-Li,...,L fc G BeZ(P). 

This property holds. Suppose there is some S 1 G U(P) such that {Li, . . . , Lk} C 5 
but L ^ S\ Let P = (P, {ii <- ,...,L k <- })• Then, the following holds: For 
every rule r in P, r G Rej(S,P / ) iff r G Rej(S,P). Indeed, each Lj (1 < i < n) 
is neither in Rej(S, P) nor in Rej(S, P). By Theorem 4, 5 is a minimal model of 
((UP) \ J?ej(S, P)) s . It follows that S* is a minimal model of ((UP) \ Rej(S, P)) s , 
which in turn implies, by using Theorem 4 again, that S G U(P). Since i ^ S, we 
obtain i <- $ Bel(P'). 

(14) If Q x C BeJ(P), then Be/((P, Qi, Q 2 , . . . , Q n )) = fle/((P, Q 2 , . . . , Q„)). 
This property fails. Consider P = {a <— no< 6} and Qi = {b <— rcof a} for n = 1. 

(15) If Bel(Q 2 ) C Bel{Qi), then 

BeJ((P, Qi,Q 2 ,Qs, Qn)) = Se/((P, Q 2 , Q 3 , . . . , Q„)). 

This property fails, because it generalizes (CI), which fails. 

(16) If 5 h Q2 for some S G W((P, Q\)), then 

Bd((P, Qi,Q 2 ,Q 3 , Qn)) = Bef((P, Q u Qi U Q 2) Q 3) . . . , Q n )). 
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The property fails: Let P = {a <— notb, b <— not a}, Qi — {c <— }, and Q 2 = 
{->c <— a}. Then, S = {c, b} is an answer set of (P, Qi) such that S \= Q 2 . However, 
(P, Qi, Q2) has two answer sets, Si = {a, -ic} and S2 = {c, 6}, whilst (P, Qi,Qi U 
Q2) has the single answer set {c, 6}. 

A . 5 Proofs of the Postulates of Updates as Nonmonotonic 
Consequence Relations 

(Nl) Pi e Bel((P,Pi)). 

This is clearly satisfied (cf. (K2), (Ul), and (12)). 

(N2) If (J™ 1 Q l C Bel{{P, Pi)) and P 2 C BeZ((P, Pi U |J™ 1 Qi)), then 
P 2 C Bel((P,Pi)). 

The property holds. Let Q = U™i and P = (P,Pi). Assume Q C Bel{P) 
and P2 C Bel((P,Pi U Q)), and consider some answer set S of P. Then, S |= Q. 
Moreover, S is an answer set of P / < L)Q. Since Q C Bel(P'), it follows that for each 
rule s € Q rejecting a rule r from P, there exists a rule n S Pi also rejecting r. 
Hence, no further rule in Pcan be rejected using Q. Let P' = (P, PiUQ). Then, S* is 
an answer set of P^, so S is an answer set of (P, PiUQ). Since P 2 C Bel((P, PiUQ)), 
we obtain S \= Pi- This proves the property. 

(N3) If U"i <3* Q 5e/((P, Pi)) and P 2 C Be/((P, Pi)), then 
P 2 CBel((P,PiU\JZiQi))- 

The property fails: Consider the counterexample P = 0, Pi = {a <— noffe}, P 2 = 
{a <— }, and, for m = 1, Qi = {b <— not a}. 

(N4) If P+i C Bel((P, Pi)) (l<i<n) and P 1 C Se/((P, P„)) (n > 2), then 
{P' I P' C Bel((P,Pi))} = {P' I P' C Bel((P,Pj))}, for all *,j < n. 

The property does not hold, because it includes (U6) as a special case, which fails. 

(PI) If Pi = P 2 and P 3 C Be/((P,Pi)), then P 3 C Bel{{P 1 P 2 )). 

The property fails, due to the following counterexample: P = {a <— , b <— }, Pi = 
{^a 6}, P 2 = {^fe a}, and P 3 = {b <- }. 

(P2) If Pi h ft and Pi C Bel((P,P 3 )), then P 2 C Bel((P,P 3 )). 

This property does not hold. For a counterexample, consider P = 0, Pi = {a <— 
noi &}, P 2 = {a <— }, and P 3 = {6 <— , -ia <— }. 

(P4) If P 2 C Be/((P, Pi)) and P 3 C Se/((J», Pi)), then P 2 U P 3 C Se/((J», Pi)). 



The property is trivially satisfied. 
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